app/controllers/application_controller.rb
def authenticate
    unless current_user || controller_name.eql?('sessions')
      redirect_to '/session/sso' # halts request cycle
    end
  end
# CSRF attacks: raise an exception.
CSRF attacks: raise an exception.
CSRF attacks : raise an exception .
def authenticate
    unless current_user || controller_name.eql?('sessions')
      redirect_to '/session/sso' 
    end
  end
def authenticate unless current_user || controller_name . eql? ( 'sessions' ) redirect_to '/session/sso' end end
CSRF attacks: raise an exception.
CSRF attacks : raise an exception .
# halts request cycle