How to hack a Rails app using its secret_token | Robert Heaton(robertheaton.com)

http://robertheaton.com/2013/07/22/how-to-hack-a-rails-app-using-its-secret-token/