Skip verify_authenticity_token for hook only.