Hey Jim, don't be a jerk, especially when your answer is wrong. Using <%= form_authenticity_token %> doesn't work because you don't have a server to dynamically insert content into html as an app is static and packaged on the client device (iPhone/iPad). CSRF should not be a possible ...
