Rails CSRF vulnerability explanation · HackerTrans