Removed reliance on Thymeleaf for CSRF token passing to AngularJS