Added CSRF support to ml-javascript foo.