The actual before_filter that is used. Modify this to change how you handle unverified requests.

Source Code

# File action_controller/request_forgery_protection.rb, line 85
def verify_authenticity_token
  verified_request? || raise(ActionController::InvalidAuthenticityToken)
end