Update subscribers.py

get csrf-token from request.json_body and request.headers also