# Update and read user preferences, which are arbitrayr key/val pairs
class UserPreferenceController < ApplicationController
+ skip_before_filter :verify_authenticity_token
before_filter :authorize
before_filter :require_allow_read_prefs, :only => [:read_one, :read]
before_filter :require_allow_write_prefs, :except => [:read_one, :read]