It is a warning that may appear in your log.
Primary reason for this warning is CSRF_meta_tag is missing in your layout.
Following are some other solutions to get rid of this WARNING.
- Add CSRF token in ajax request header using xhr. (Highly recommended)
- Override the method : verified_request (Recommended to override the check for JSON request only).
- Skip the method call verify_authenticity_token.
- Change POST to GET (Token verification is done for requests other than GET)