Guide to CSRF Protection in Rails
kadwill.com