fix for tokens controller remove skip_before_filter verify_authenticity_token