set CSRF token as cookie for AngularJS