add csrf token to CGridView ajax call when ajaxType is set to POST

Fixes #2864

Tested on a default CRUD controller created with gii, where CListView in index view is switched to CGridView and ajaxType option is added and set to POST.