Matthias Günther

E.g.: ``` \begin{aside} \heading{CSRF (Cross-site request forgery)} \label{box:csrf} ``` `Please note that we have to pass the `authenticity_token` with the saved value of `csrf` for security reasons for security reasons...

Having a form ``` html Email: Password: Remember me forget password? ``` The `authenticity_token` is 068aa59cb97beaff2038b403ac9946d7. This special value stands in `config/apps.rb`: ``` ruby Padrino.configure_apps do # enable :sessions set...

I mean they should (it's not always the case).

The specs are ready, but not included in the text.

It's first mentioned in chapter **2.5.1 Authorization** and explained there, but this part should be moved into section 2.3.9 Registration and Confirmation Emails where `app(JobVacancy::App)` is used instead.

See details here: https://github.com/padrinobook/job-vacancy/issues/3. Check the UserCompletion class as PORO.

Add infobox in chapter "Reset Password" . Details under https://en.wikipedia.org/wiki/Don't_repeat_yourself


It's not explained what flash makes in the sessions chapter - move it to the right place.