JarrodSpillers.com » Blog Archive » Trying to use Rails CSRF protection on cached actions? Rack middleware to the rescue!
Interesting solution to still using auth tokens to prevent CSRF while doing page/frag caching.