From 62352fe6d609fbd56c65a152a2a51c073321ebeb Mon Sep 17 00:00:00 2001
From: Andy Zhao <andyzhao.zhao@gmail.com>
Date: Fri, 29 Jun 2018 13:59:03 -0400
Subject: [PATCH] Authorize admin after checking csrf (#523)

---
 app/controllers/admin/application_controller.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/controllers/admin/application_controller.rb b/app/controllers/admin/application_controller.rb
index d9356198f..5069322c7 100644
--- a/app/controllers/admin/application_controller.rb
+++ b/app/controllers/admin/application_controller.rb
@@ -7,6 +7,7 @@
 module Admin
   class ApplicationController < Administrate::ApplicationController
     include Pundit
+    protect_from_forgery with: :exception, prepend: true
     before_action :authorize_admin
 
     def order