added universal CSRF to jQuery