Rails security via ember

There is a rails app that servers an ember.js application via rails-ember and another site that has the data. Once the ember app is running it gets ember-data from a data server. In a couple of cases it can also do puts to the data server via ember data model.save() calls …

The ember app on a put does an http options method. For some reason the options method does not have the api_key that the other methods typically have.

Here are changes I made to the rails data server: