Can you post the `webhooks_controller.rb`?
If you are overriding the Webhook controller like I showed in the episode, it should be `skip_before_action`.
```ruby
class WebhooksController < StripeEvent::WebhookController
skip_before_action :verify_authenticity_token
end
```
In your `application_controller.rb`, what does your `protect_from_forgery` look like? Try changing it to `:exception`.
```ruby
class ApplicationController < ActionController::Base
protect_from_forgery with: :exception
end
```
I just checked the `stripe_event` source and it looks like they've updated it to have the check in there. Because it is being called twice, I believe it is common for it to error out.
[source](https://github.com/integrallis/stripe_event/blob/master/app/controllers/stripe_event/webhook_controller.rb)
Try commenting out the `routes.rb` line for the controller and add `mount StripeEvent::Engine, at: '/stripe/event'`
