Added CSRF token on Ajax requests
Updated README.md