Hm; yeah, sure. I think Rails has an authenticity token it sends with form submissions (create / update / destroy); maybe we can do something with that? Might have to do a little research on it.