Don't validate authenticity token