diff --git a/rack-protection/README.md b/rack-protection/README.md
index 90b4b332..5f8df447 100644
--- a/rack-protection/README.md
+++ b/rack-protection/README.md
@@ -83,5 +83,4 @@ Prevented by:
 
 # TODO
 
-* More specs
-* Properly implement FormToken
+* Implement pending specs (run `rake test` to see them)