Security

ApplicationController

class ApplicationController < ActionController::Base

# Prevent CSRF attacks by raising an exception.

protect_from_forgery with: :exception

APIs

protect_from_forgery with: :null_session