Add csrf token. This is done in rails/jquery-ujs and devise fails without it.