{"action":"created","issue":{"url":"https://api.github.com/repos/plataformatec/devise/issues/2734","repository_url":"https://api.github.com/repos/plataformatec/devise","labels_url":"https://api.github.com/repos/plataformatec/devise/issues/2734/labels{/name}","comments_url":"https://api.github.com/repos/plataformatec/devise/issues/2734/comments","events_url":"https://api.github.com/repos/plataformatec/devise/issues/2734/events","html_url":"https://github.com/plataformatec/devise/issues/2734","id":22414863,"number":2734,"title":"getting \"Can't verify CSRF token authenticity\" even if csrf toke in present ","user":{"login":"rtcoms","id":37205,"avatar_url":"https://avatars.githubusercontent.com/u/37205?v=3","gravatar_id":"","url":"https://api.github.com/users/rtcoms","html_url":"https://github.com/rtcoms","followers_url":"https://api.github.com/users/rtcoms/followers","following_url":"https://api.github.com/users/rtcoms/following{/other_user}","gists_url":"https://api.github.com/users/rtcoms/gists{/gist_id}","starred_url":"https://api.github.com/users/rtcoms/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rtcoms/subscriptions","organizations_url":"https://api.github.com/users/rtcoms/orgs","repos_url":"https://api.github.com/users/rtcoms/repos","events_url":"https://api.github.com/users/rtcoms/events{/privacy}","received_events_url":"https://api.github.com/users/rtcoms/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":43,"created_at":"2013-11-10T19:08:41Z","updated_at":"2016-02-13T16:34:11Z","closed_at":"2013-12-01T09:35:39Z","body":"I'm doing simple authentication (without ajax or api) and getting error for csrf authenticity token. I'm using latest version of rails and devise\r\n\r\ncheck the post request below\r\n\r\n     Parameters: {\"utf8\"=>\"✓\",    \r\n     \"authenticity_token\"=>\"SJnGhXXUXjncnPhCdg3muV2GYCA8CX2LVFV78pqddD4=\", \"user\"=> \r\n    {\"email\"=>\"a@a.com\", \"password\"=>\"[FILTERED]\", \"remember_me\"=>\"0\"},\r\n    \"commit\"=>\"Sign in\"}\r\n\r\n    Can't verify CSRF token authenticity\r\n     User Load (0.4ms)  SELECT \"users\".* FROM \"users\" WHERE \"users\".\"email\" =  \r\n     'a@a.com' LIMIT 1\r\n    (0.1ms)  begin transaction\r\n    SQL (0.4ms)  UPDATE \"users\" SET \"last_sign_in_at\" = ?, \"current_sign_in_at\" = ?,\r\n    \"sign_in_count\" = ?, \"updated_at\" = ? WHERE \"users\".\"id\" = 2  [[\"last_sign_in_at\", Fri,\r\n    08 Nov 2013 14:13:56 UTC +00:00], [\"current_sign_in_at\", Fri, 08 Nov 2013 14:18:49 UTC\r\n    +00:00], [\"sign_in_count\", 3], [\"updated_at\", Fri, 08 Nov 2013 14:18:49 UTC +00:00]]\r\n    (143.6ms)  commit transaction\r\n    Redirected to http://localhost:3000/\r\n    Completed 302 Found in 239ms (ActiveRecord: 144.5ms | Search: 0.0ms)"},"comment":{"url":"https://api.github.com/repos/plataformatec/devise/issues/comments/183699852","html_url":"https://github.com/plataformatec/devise/issues/2734#issuecomment-183699852","issue_url":"https://api.github.com/repos/plataformatec/devise/issues/2734","id":183699852,"user":{"login":"allpumpedup","id":5823551,"avatar_url":"https://avatars.githubusercontent.com/u/5823551?v=3","gravatar_id":"","url":"https://api.github.com/users/allpumpedup","html_url":"https://github.com/allpumpedup","followers_url":"https://api.github.com/users/allpumpedup/followers","following_url":"https://api.github.com/users/allpumpedup/following{/other_user}","gists_url":"https://api.github.com/users/allpumpedup/gists{/gist_id}","starred_url":"https://api.github.com/users/allpumpedup/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/allpumpedup/subscriptions","organizations_url":"https://api.github.com/users/allpumpedup/orgs","repos_url":"https://api.github.com/users/allpumpedup/repos","events_url":"https://api.github.com/users/allpumpedup/events{/privacy}","received_events_url":"https://api.github.com/users/allpumpedup/received_events","type":"User","site_admin":false},"created_at":"2016-02-13T16:34:11Z","updated_at":"2016-02-13T16:34:11Z","body":"@drewhamlett suggestion of removing domain: :all flag worked for me. "}}