Prevent CSRF from Ajax POST reqeust