Set "X-CSRF-Token" header for ajax request by default.
Added uuid.js
copyright 2012 -> 2013