Remove protect_from_forgery to facilitate API-style access.