Add CSRF token to AJAX, should fix sign out issues