openaustralia/publicwhip — pull request #526 by damncabbage (2014-09-20 13:54:43+00:00)
Title: Re-enabled CSRF protection for Policies and Divisions.

This removes the lines disabling CSRF protection, and switches the manual form tags back over to `form_for`.

A couple of tweaks were needed along the way:
* `post` => `patch`
* Specifically checking for *errors* on a new Policy record; a dummy `@policy` is needed for the form helper.

(Fixes #445.)