Skip verify_authenticity_token in API controller

I'm seeing ActionController::InvalidAuthenticityToken when the API tries to sync the permissions. So skip the checking.

skip_before_filter is both Rails 3 and 4 compatible.