When Rails' protect_from_forgery Fails | Hacker News Reader