fix js invalid authenticity token