Do not use cookie to get CSRFToken, it is now availalbe in JS