master ADD: quick way to get crsf token for POST (to do better!)