Disable CSRF for arduino posts
Fix strong param issue