engine/app/controllers/application_controller.rb

class ApplicationController < ActionController::Base  
  protect_from_forgery
end