Configure ActionController::RequestForgeryProtection for an ApplicationController that does not inherits from ActionController::Base (or any controller that does not include ActionController::RequestForgeryProtection).
This is required since the module is included after the application is loaded, so it does not get configured automatically by the configuration files config/environments/*.rb.