add token to all ajax requests (fix for sirtrevor upload)