Update CSRF Feature and Fixed for ajax request