Updated documentation and added csrf token to ajax login