class Sinatra::Base

def setup_protection(builder)
  return unless protection?
  options = Hash === protection ? protection.dup : {:except => [:escaped_params]}
  options[:except] = Array options[:except]
  options[:except] += [:session_hijacking, :remote_token] unless sessions?
  builder.use Rack::Protection, options
end