Look for CSRF token in the JSON data

CSRF token is generally provided in form data, but could just as easily (and sometimes more conveniently) be provided in the JSON data.