Don't require protect_from_forgery