Strip off jQuery in angular csrf-token injection