Adding 'x-csrf-token' to the allowed headers in the Server script.