# File lib/action_controller/request_forgery_protection.rb, line 91
      def verified_request?
        !protect_against_forgery?                            ||
          request.get?                                       ||
          form_authenticity_token == form_authenticity_param ||
          form_authenticity_token == request.headers['X-CSRF-Token']
      end