Rail 2.3.2 Protect_from_forgery

Is rails supposed to auto-generate a protect_from_forgery secret for me?
In the application controller I do not get a secret code to uncomment.
When I manually create one and attempt to use it, it does not work.