do not verify_authenticity_token when status is called via post