Scott Smith

Unfortunately, the above matches exactly. I changed your suggestion to:

class ApplicationController < ActionController::Base
    protect_from_forgery with: :null_session,
      if: Proc.new { |c| c.request.format =~ %r{application/json} }
end

Now it handles additional content types terms such as:

application/json; charset=utf-8

Thanks for your idea above, it got me past my problem.