remove authenticity token