From http://excid3.com/blog/rails-tip-2-include-csrf-token-with-every-ajax-request/#.UYeUFVoW1Sc