Include csrf token in backbone requests