Check for XSRF-TOKEN header to support AngularJS built-in CSRF protection