Add authenticity token as parameter and removed protect from forgery