Setting csrf token in headers which works in Firefox and Chrome as well