class Rack::Protection::AuthenticityToken

def per_form_token(session, path, method)
  token_hmac(session, "#{path}##{method.downcase}")
end