Ok, I found this post: http://stackoverflow.com/questions/6128495/devise-being-logged-out-on-post-to-different-route
and it showed me that the 'protect_from_forgery' method is the culprit here and commenting it out makes this functionality work how it is supposed to. Again it makes me nervous to leave this method out. Does anyone know of a way to fix this or work around the 'protect_from_forgery' for just this :upload action? I'm not really finding anything on fixing this issue via google -- Posted via http://www.ruby-forum.com/. -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk@googlegroups.com. To unsubscribe from this group, send email to rubyonrails-talk+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.