https://oscarjiang.site/posts/secret-of-rails-csrf-token.html/