Convert all post requests to mentions_controller to gets and redirect.
Call authenticate! before filter only in mentions_controller and not in the app controller.
Revised mentions_controller_spec for these changes