Fix AngularJS + Rails CSRF protection

angular_csrf.rb

ActiveSupport.on_load(:action_controller) do
  after_action :set_csrf_cookie_for_angular_js

  define_method :set_csrf_cookie_for_angular_js do
    cookies['XSRF-TOKEN'] = form_authenticity_token if protect_against_forgery?
  end
  private :set_csrf_cookie_for_angular_js

  define_method :verified_request_with_angular_header? do
    verified_request_without_angular_header? || form_authenticity_token == request.headers['X-XSRF-Token']
  end
  alias_method_chain :verified_request?, :angular_header
end