turn off protect_from_forgery for users#delete_all & backup#delete_all