Rails CSRF vulnerability explanation | Hacker News Reader