changed access_token to janrain_access_token in user object and added csrf token to login form explicitly (so older rails apps dont get errors)