lest/rails — comment on commit 0afa8b826f7aad2bfab90bc2417bf33ff36331c8
File: actionpack/lib/action_controller/metal/request_forgery_protection.rb line 42
By NZKoz:

We should probably actually still default to :reset_session here and just change the generated apps in the meantime