Make the "invalid authenticity token" 403 error pretty like the others

- Users *shouldn't* see this, so don't include any extra information.

![screen shot 2014-12-18 at 12 16 34](https://cloud.githubusercontent.com/assets/355033/5487962/c3702a58-86af-11e4-8a07-c7c2f1440051.png)

OK, that's sensible. In that case, what do I do with this method?