set ruby version
turn off json_csrf protection