gistfile1.txt

class ApplicationController < ActionController::Base
  rescue_from ActionController::InvalidAuthenticityToken, :with => :bad_token

  def bad_token
    flash[:notice] = "Your session has expired."
    respond_to do |accepts|
      accepts.html do
        store_location
        redirect_to(:controller => '/sessions', :action => 'new') and return false
      end
      accepts.xml do
        headers["Status"]           = "Unauthorized"
        headers["WWW-Authenticate"] = %(Basic realm="Web Password")
        render :text => "Could't authenticate you", :status => '401 Unauthorized'
      end
      accepts.js do
        store_location
        render :update do |page|
          page.redirect_to(:controller => '/sessions', :action => 'new') and return false
        end
      end
    end
  end

end