app/controllers/api/base_controller.rb

module Api
  class BaseController < ApplicationController
    protect_from_forgery only: []
  end
end