to avoid InvalidAuthenticityToken during spec run