"ActionController\:\:InvalidAuthenticityToken" OR "ActionController\:\:InvalidCrossOriginRequest" OR "ActionController\:\:MethodNotAllowed" OR "ActionController\:\:BadRequest" OR "ActionController\:\:ParameterMissing"