fix script
Return of csrf protection
Add Ajax call to volume change