Making sure the CSRF token is always submitted on AJAX