Fix CSRF protection at the ApplicationController
Fix CSRF protection at the ApplicationController

Fix the implementation of CSFR protection at thet Application Level by
setting `protect_from_forgery with: :exception` in the
`ApplicationController`

ministryofjustice/prison-visits,ministryofjustice/prison-visits,ministryofjustice/prison-visits