mamantoha/omniauth-vkontakte — pull request #10 by jekhor (2012-08-11 21:13:00+00:00)
Title: Disable CSRF protection (vkontakte ignores parts of OAuth specification)

Unfortunately VKontakte's programmers ignore some parts of OAuth2
specification and don't return 'state' parameter back to the client.

Disable state-based CSRF protection by setting option
:provider_ignores_state to true.

Signed-off-by: Yauhen Kharuzhy