CRUMB defense system used to verify AJAX communication