Check if the verification is really not needed.
|
skip_before_action :verify_authenticity_token, only: [:create] |
When the verification is present, going to a link in an incognito tab and submitting the newsletter form fails with Can't verify CSRF token authenticity.