Correct documentation for setting csrftoken in $.ajaxSetup