Update Readme about jquery ajax CSRF settings