When Rails' protect_from_forgery Fails | Dark Hacker News