fixing routes
not logging InvalidAuthenticityToken