rails/rails — pull request #5326 by lest (2012-03-07 14:55:54+00:00)
Title: configure how unverified request will be handled

throw InvalidAuthenticityToken exception by default
can be configured using `:with` option in `protect_from_forgery` method
or `request_forgery_protection_method` config option

Original issue #5300