Use sane defaults as ring middleware

i.e. move to ring-defaults which for example includes anti-forgery
middleware.