don't protect_from_forgery at all
configure satellites; remove stuff we don't need