Allow inline CSS, for now.

The form_for helper in the picture upload form generates a
<div style="display:none"> tag around the utf8 and authenticity_token input
fields.