XSRF Protection by AngularJS