Skipped verify_authenticity_token to avoid CSRF warning/error