Topic: jquery InvalidAuthenticityToken


I am using jquery to login to my site and I am NOT setting the authenticity token, however I am still able to log in.

If I disable JS then I do get the InvalidAuthenticityToken message.

I have protect_from_forgery set in my application controller so why is it allowing me to log in without sending one?