Add initial structure and CSRF for rails