set angular to pass CSRF token to avoid rails warnings