Use constants for key words.
Modify "CSRF" filter.

Check authenticity and return JSON response.