class Rack::Protection::AuthenticityToken

def mask_authenticity_token(session, path: nil, method: :post)
  set_token(session)
  token = if path && method
    per_form_token(session, path, method)
  else
    global_token(session)
  end
  mask_token(token)
end