userinfo endpoint broken in rails api mode

[jmortlock]

Rails API base controller does not include the "verify_authenticity_token" method, which means the skip check in the userinfo controller raises an exception