Fix Bug 881856 - Allow the X-CSRF-Token Header on requests

https://bugzilla.mozilla.org/show_bug.cgi?id=881856