CSRFP js modified

#Modification:
1. URL rewriting implemented for static URLS
2. XHR method modified, now sends X-No-CSRF header with every POST
requests, works for POST only currently