Issue #14 ajax 403 errors

Disregard the name of the branch, this is a fix for issue #14 -- ajax stuff for schools fails. In addition, in boilerplates (thanks @grobertson for the perfect word for that) the AJAX/CSRF stuff in to `regimun_app/static/js/base.js` and includes it in `regimun_app/templates/base.html` so that all children templates get it.