DavidS/hrdb

# Functionality for all controllers:
#   * forgery protection
#   * default not_authenticated action
class ApplicationController < ActionController::Base
  # Prevent CSRF attacks by raising an exception.
  # For APIs, you may want to use :null_session instead.
  protect_from_forgery with: :exception

  def not_authenticated
    redirect_to login_url, alert: 'First login to access this page.'
  end
end