Update request_forgery_protection docs

- delete some_api_action method from ApplicationController
- change explanation, what you should do for api application