config angular for rails defeault csrf protection
user able to signout, session controller spec for singout