Change protect_from_forgery strategy and add root route.