Rails, Varnish, Cookie Sessions, and CSRF tokens | Hacker News Reader