app/controllers/application_controller.rb
# Prevent CSRF attacks by raising an exception.
# For APIs, you may want to use :null_session instead.
Prevent CSRF attacks by raising an exception.
For APIs, you may want to use :null_session instead.
Prevent CSRF attacks by raising an exception . For APIs you may want to use : null_session instead .
def cache
    response.headers["Surrogate-Key"] = "fbpac-api"
    expires_in(48.hours, public: true, must_revalidate: true)
  end
def cache response . headers [ "Surrogate-Key" ] = "fbpac-api" expires_in ( 48 . hours , public : true , must_revalidate : true ) end
Prevent CSRF attacks by raising an exception.
Prevent CSRF attacks by raising an exception .
### staging / passworded #response.headers["Cache-Control"] = "no-cache, no-store, max-age=0, must-revalidate, private" #response.headers["Pragma"] = "no-cache" #response.headers["Expires"] = "Sun, 10 May 2015 00:00:00 GMT" ### live