Include CSRF token in all AJAX requests

Resolves issue #5 (Tags are causing logout).