Update request_forgery_protection.rb

form_authenticity_param should be used in order to override the authenticity parameter?
My case is that the token is not directly accessible from params, but from a Json encoded param.
So I can't just set a different form_authenticity_token

make sense?