added csrf methods in subscriptions.js #110