Fixed csrf protection for ajax requests in forum.