Inherit from ApplicationController

Configure it to not do CSRF protection (we're a simple API)