Skip CSRF check when posting through the OAuth api
Updating developer documentation
A bit of refactoring on API controllers
A small refactoring