headers for form submission

set xhr and xsrf headers accordingly