Removed csrf token from body and added to token

Client will read from token and send with each request
Re-indented and removed turbo-links attributes from layout