disabled csrf on sensor_readings controller