Add :authenticity_token in comments form

[arnaudoff]

In Rails 4, in order for the AJAX comments to work, the form_for in app/views/blogit/comments/_form.html.erb needs authenticity_token: true as an option, otherwise posting a comment throws an exception for invalid CSRF token.

Not sure if that's a bug or it's documented/configurable somewhere.