added csrf token to the meta and now it will be sent with each $.ajax request