Added csrf token to ajax_add_star function.