Add CSRF token in comments loaded via Javascript