Skip CSRF verification on OmniAuth callbacks

The OpenID provider gives us back a direct POST with no token.

Author: reidab

app/controllers/open_conference_ware/authentications_controller.rb

@@ -2,6 +2,9 @@ module OpenConferenceWare
   class AuthenticationsController < ApplicationController
     before_filter :require_auth_hash, only: [:create]
 
+    # We need to accept a raw POST from an OmniAuth provider with no authenticity token.
+    skip_before_filter :verify_authenticity_token, :only => :create
+
     def sign_in
       page_title "Sign In"
     end