Skip verify_authenticity_token in API controller

I'm seeing ActionController::InvalidAuthenticityToken when the API
tries to sync the permissions. So skip the checking.

skip_before_filter is both Rails 3 and 4 compatible.
Whitespace
Merge pull request #22 from matthewford/verify_authenticity_token

Skip verify_authenticity_token in API controller