disable authenticity token in a better way