skip_before_action :verify_authenticity_token, only: [...]
<%= hidden_field_tag "authenticity_token", form_authenticity_token %>