Fix CSRF issues in rails 4