skip verify_authenticity_token for sort action