skips authenticity token for json requests

I skip the check for an authenticity token for incoming JSON request in order to allow Susteq to hit our transactions/new endpoint. This is at best a temporary measure.