skip authenticity token for people controller