Use Rails 4 CSRF syntax