skip verify CSRF token From http://stackoverflow.com/questions/1177863/how-do-i-ignore-the-authenticity-token-for-specific-actions-in-rails
#For individual actions, you can do:
protect_from_forgery :only => [:update, :delete, :create]
#or
protect_from_forgery :except => [:update, :delete, :create]
#For an entire controller, you can do:
skip_before_filter :verify_authenticity_token