I tried to stop CSRF for API in application_controller.rb with skip_before_action :verify_authenticity_token
It worked well until I generated devise views for custom logging.
Now, CSRF keeps working even if I tried to add skip_before_action :verify_authenticity_token to the registrations_controller.rb
I'm not sure if this is a bug or misuse