Inherit from APIController and skip :verify_authorized filter