skip verify_authenticity_token for hook
Changed: hooks routing