Rails -- ActionController::InvalidAuthenticityToken解决办法

class FooController < ApplicationController
protect_from_forgery :except => :index

# you can disable csrf protection on controller-by-controller basis:
skip_before_filter :verify_authenticity_token
end

# Disable request forgery protection in development environment
config.action_controller.allow_forgery_protection = false

<%= tag(:input, :type => "hidden", :name => request_forgery_protection_token.to_s, :value => form_authenticity_token) %>