Ensure jQuery sends CRSF token header with XHRs