upgraded to rails 4
remove protect from forgery in application controller