Skipping authenticity token in controller classes