skippping authenticity tokens for ckeditor pictures controller