Allow csrftoken in json data

CSRF-token is generally provided in the form-data of the POST request. But in an AJAX
post it can be in the request.json object. This patch permits the csrf token to be in 
request.json.