Whitespace.
Added CSRF protection onto the AJAX endpoint.