Make AJAX-editing CSRF compatible