Issue with the new csrf protection with the new ajax fields