csrf bug
rails token bug fixed