skip authenticity for mediafiles json post