Added rack_csrf. Should fix the spamming problem.