gistfile1.txt

# Remove the CSRF Check for Ajax Requests.
module ActionController
  module RequestForgeryProtection
    def verified_request?
      !protect_against_forgery?     ||
        request.method == :get      ||
        request.xhr?                ||
        !verifiable_request_format? ||
        form_authenticity_token == params[request_forgery_protection_token]
    end
    protected :verified_request?
  end
end