skip csrf in api/v1/trucks_controller