Skip Controller CSRF checks to fix cuke steps

Various cuke steps make direct browser AJAX requests - to bypass
certain UI actions. This patch ensures these requests are handled
correctly.

Signed-off-by: Alex Coles <alex@alexbcoles.com>

app/controllers/rb_application_controller.rb

@@ -39,6 +39,8 @@ class RbApplicationController < ApplicationController
 
   before_filter :load_sprint_and_project, :check_if_plugin_is_configured, :authorize
 
+  skip_before_action :verify_authenticity_token, if: -> { Rails.env.test? }
+
   private
 
   # Loads the project to be used by the authorize filter to determine if