I’m soooooo fucking pissed right now.. even thought its probably my fault by not looking at Rails Docs first I just didn´t know where to search at/for! As I would have trouble explaining myself at any language here it goes..
Rails 2.x secret is acessed by the method form_authenticity_token ! That´s if you use protect_from_forgery
This protect_from_forgery must be used mostly when making a AJAX call. If you are having problems when using other lib than Prototype, that could be it.
ref: http://api.rubyonrails.org/classes/ActionController/RequestForgeryProtection/ClassMethods.html