A few loose ends

In this project, we'll tie up a few loose ends:

• Using Cross-Site Request Forgery (CSRF) protection.
• Using [] rather than .at() for ActiveRecord::Relations.
• Introducing find_by and find.
• Using PATCH and DELETE routes.