WIP Ajax, ajax CSRF issue