API access skip protect_from_forgery with: :exception

Signed-off-by: mfebrianto <michaelfebrianto@gmail.com>