title: Rails 6 `protect_from_forgery with: :null_session` not working
body: <p>In an effort to learn React and using Rails together I am in the process of building a simple "Todo" app. Im using axios to make requests to my rails api within react components.</p>
  
  <p>So far everything was working fine until I made my first POST request. Im pointing to the right place and sending fine params but saw I was getting <code>Can't verify CSRF token authenticity.</code>. Upon further googling it appears that adding:</p>
  
  <pre><code>class ApplicationController &lt; ActionController::Base
      protect_from_forgery with: :null_session
  end
  </code></pre>
  
  <p>Would fix my issue. But despite server restarts/etc... I still receive the same error when sending a POST request. Also adding <code>prepend: true</code> does not help either (as was suggested by another member).</p>
  
  <p>Is there something im missing? This seems like a straightforward problem from what i've read but it doesn't seem to be working for me.</p>
  
  <p>Im on Rails 6.0 </p>