Update nexus.js

Changed to match sookasa csrf cookie name. Still todo: set cookie name from settings