devise callback authenticate_user! not redirect

Good day. It is impossible to implement the following script using devise: User logs in. User opens a form to create an object. User logs out. User tries to create an object through the User form on a login page with notification.

The problem is that when I try to send a request from the browser, the application crashes, on error:

ActionController::InvalidAuthenticityToken (ActionController::InvalidAuthenticityToken): 

routes.rb

 Rails.application.routes.draw do devise_for :users, path: '/', path_names: { sign_in: 'login' } resources :questions, only: [:index, :new, :show, :create, :destroy] do resources :answers, only: [:create, :destroy], shallow: true end root 'questions#index' end 

controller

  class AnswersController < ApplicationController before_action :authenticate_user!, only: [:create, :destroy] def create @question = Question.find(params[:question_id]) @answer = @question.answers.new(answer_params) @answer.user = current_user @answer.save redirect_to @question end 

The form

 - if user_signed_in? = form_for [@question, @answer] do |f| .errors .form-group = f.label :body, t('.you_answer') = f.text_area :body, class: 'form-control' .form-group = f.submit t('.asked'), class: 'btn btn-primary' 

layout

 !!! %html %head %title ProSampleApp = csrf_meta_tags = stylesheet_link_tag 'application', media: 'all', 'data-turbolinks-track': 'reload' = javascript_include_tag 'application', 'data-turbolinks-track': 'reload' %body = render 'layouts/header' .container-fluid #main.col-md-10 - flash.each do |message_type, message| %div{'class' => "alert alert-#{message_type}"} - Array(message).each do |msg| %li= msg = yield 

app controller

 class ApplicationController < ActionController::Base protect_from_forgery with: :exception rescue_from ActiveRecord::RecordNotFound, with: :show404 protected def show404 render file: 'public/404.html', status: :not_found, layout: false end end