Re-add the XSRF token as a header