From 913a6075289a7bae47fb606decbf02621b38921f Mon Sep 17 00:00:00 2001 From: Sam Date: Wed, 5 Jun 2013 14:01:24 +1000 Subject: [PATCH] need to punch through account creation stuff --- app/controllers/users_controller.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb index 8cd21596379..32d13118bdb 100644 --- a/app/controllers/users_controller.rb +++ b/app/controllers/users_controller.rb @@ -11,7 +11,8 @@ class UsersController < ApplicationController # we need to allow account creation with bad CSRF tokens, if people are caching, the CSRF token on the # page is going to be empty, this means that server will see an invalid CSRF and blow the session # once that happens you can't log in with social - skip_before_filter :verify_authenticity_token, only: [:create, :check_username] + skip_before_filter :verify_authenticity_token, only: [:create] + skip_before_filter :redirect_to_login_if_required, only: [:check_username,:create,:get_honeypot_value,:activate_account,:send_activation_email,:authorize_email] def show @user = fetch_user_from_params