pass csrf token via ajax request instead of hidden input
refactor gulp config and tasks