Rule fix

Use ajax wrapper to send csrftoken