visualization controller: protect_from_forgery except: :parse_view