class ApplicationController < ActionController::Base # Prevent CSRF attacks by raising an exception. # For APIs, you may want to use :null_session instead. protect_from_forgery with: :exception add_flash_types :error, :alert before_filter :configure_permitted_parameters, if: :devise_controller? protected # We don't have how too test this unless we have the Devise controllers. # Since creating the controllers looks wronger than not testing this two # lines. I think we can live without 100% of coverage def configure_permitted_parameters devise_parameter_sanitizer.for(:sign_up) << :name devise_parameter_sanitizer.for(:account_update) << :name end end