[Vivian and Michael] added a skip_before_filter on verifying authenticity token