(because the other JS in here no longer needs to be here either -- since it's not rendering the CSRF token directly into the JS anymore)