Changed CSRF token request to asynchronous