added details on Authenticity token in RoR