From 4e483fb07eb7ee58e41e6f82db2905e3c15faba6 Mon Sep 17 00:00:00 2001
From: Sahat Yalkabov <sakhat@gmail.com>
Date: Thu, 6 Feb 2014 08:09:39 -0500
Subject: [PATCH] Add 403 Forbidden on POST requests to FAQ

---
 README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.md b/README.md
index 85cc3aa32f..669679777d 100644
--- a/README.md
+++ b/README.md
@@ -288,6 +288,13 @@ would like to see original, non-minified markup, add `app.locals.pretty = true;`
 
 FAQ
 ---
+### Why do I keep getting `403 Error: Forbidden` on submitting a **POST** request?
+You need to add this hidden input element to your form. This has been added in the
+pull request [#40](https://github.com/sahat/hackathon-starter/pull/40).
+```
+input(type='hidden', name='_csrf', value=token)
+```
+
 ### What is cluster_app.js?
 From the [Node.js Documentation](http://nodejs.org/api/cluster.html#cluster_how_it_works):
 > A single instance of Node runs in a single thread. To take advantage of multi-core systems