Skip CSRF verification for JSON requests