Allow POST requests to CommentsController without authenticity tokens