Update to specify the csrf-token, otherwise rails is gonna reject the request