Securing Your Rails App

Cross-Site Request Forgery