Replace `remote: true` with `data: {...}` so that csrf token is included