Registrations controller responds to JSON
Use POST action for message controller create spec
Stay on brand
Skip CSRF check for API calls