Added csrf token to ajax_add_star function.

Created for issue #87.  I tried to run the tests but something seems messed up.  Can you try running this on your non-csrf project to ensure it doesn't break there?