Remote forgery protection for json requests to the api/v1 endpoints

Due to my testing, I incorrectly removed the forgery protection
skip action from the controllers in the api. This fixes that and allows jsonp
calls to work correctly

app/controllers/api/v1/conferences_controller.rb

@@ -4,6 +4,9 @@ module Api
       load_resource find_by: :short_title
       respond_to :json
 
+      # Disable forgery protection for any json requests. This is required for jsonp support
+      skip_before_action :verify_authenticity_token
+
       def index
         render json: @conferences, serializer: ConferencesArraySerializer, callback: params['callback']
       end

app/controllers/api/v1/events_controller.rb

@@ -4,6 +4,9 @@ module Api
       load_resource :conference, find_by: :short_title
       respond_to :json
 
+      # Disable forgery protection for any json requests. This is required for jsonp support
+      skip_before_action :verify_authenticity_token
+
       def index
         events = Event.includes(:track, :event_type, event_users: :user)
 

app/controllers/api/v1/rooms_controller.rb

@@ -4,6 +4,9 @@ module Api
       load_resource :conference, find_by: :short_title
       respond_to :json
 
+      # Disable forgery protection for any json requests. This is required for jsonp support
+      skip_before_action :verify_authenticity_token
+
       def index
         if @conference
           respond_with @conference.venue ? @conference.venue.rooms : Room.none, callback: params[:callback]

app/controllers/api/v1/speakers_controller.rb

@@ -4,6 +4,9 @@ module Api
       load_resource :conference, find_by: :short_title
       respond_to :json
 
+      # Disable forgery protection for any json requests. This is required for jsonp support
+      skip_before_action :verify_authenticity_token
+
       def index
         if @conference
           users = User.joins(event_users: { event: { program: :conference} })

app/controllers/api/v1/tracks_controller.rb

@@ -4,6 +4,9 @@ module Api
       load_resource :conference, find_by: :short_title
       respond_to :json
 
+      # Disable forgery protection for any json requests. This is required for jsonp support
+      skip_before_action :verify_authenticity_token
+
       def index
         tracks = @conference ? @conference.program.tracks : Track.all