@bcjordan This is what I found on the website.

http://stackoverflow.com/questions/3364492/actioncontrollerinvalidauthenticitytoken

but in fact, in this case, since we are using ajax, I can remove that line here.