Get CSRF working on AJAX PUT requests