hotsh/rstat.us — pull request #639 by carols10cents (2012-09-07 22:37:20+00:00)
Title: Issue 636

Ahahaha so the form for deleting an authorization was being created by hand instead of using the rails form_tag helper, which meant an authenticity_token wasn't included in the request, and since we changed it so that you could only delete your own authorizations in a799e4b0b8, deleting an authorization was failing because it couldnt get current_user since the authenticity_token was invalid (nonexistent).

And the tests weren't failing because forgery protection is turned off in test mode. I turned it on for acceptance tests and some auth_tests fail before this fix.