before 'protect from forgery', ->
  protectFromForgery '{{ SECRET }}'