Two fixes - one for the AJAX, one for your migrations

Hi Erin,

I've got a working solution to the problem you were having. It's not elegant, but.. it's working.

The POST requests weren't authenticating. I'm not entirely sure why (CORS? It's something to do with Javascript and security. Might be on the Rails side, might be on the browser side), but as a working solution, we are embedding a script tag at the bottom of the page, and you're appending your form params to the script src.

Works like a charm! And you have access to the user (meaning it forces them to be authenticated), and the request_from_forgery works too.

The other fix related to a typo with your migrations. You had renamed a table at one stage, and had changed the name in one of your earlier migrations before the rename migration took place.