% content_for :head do %> <%= javascript_tag "var AUTH_TOKEN = #{form_authenticity_token.inspect};" if protect_against_forgery? %> <% end %> <%= error_messages_for :order %> <% @checkout_steps.each do |step| %>