plataformatec/devise — pull request #2210 by steverob (2013-01-11 20:24:31+00:00)
Title: Changed link_to to button_to for cancel registration link in edit registration view

It is advisable to use link_to for mostly GET operations. Actions like DESTROY when presented as a link can cause severe vulnerabilities.
Hence using a button is advisable.