Code cleanup: unverified request no longer raises a InvalidAuthenticityToken exception.
Authored by: jplang 2013-11-11
Parent: [r12266]
Child: [r12268]