skip authenticity check in this controller

all too often it is error-ing on
"WARNING: Can't verify CSRF token authenticity"

as this is only a js call for reviewers who are
updating the form an observer makes this call
(the HTML route, afaict, is not used)
ignore *_data.txt files

things that are pulled from the console during
investigations of issues.