ruby-omniauth-rails-csrf-protection