`request.setRequestHeader( "X-CSRF-Token", csrf_token ); `