cleanup db `use` statements
fixed typo
use meta tags to pass CSRF token.
Use .prop() instead .attr().
Supports sending CSRF token via HTTP header.