upgrade jquery and fix ajax csrf bugs