Changes how we set the csrf header for jquery, changed to global and ensures that it is lazily resolved to always ensure it has the newest value