Adding solution to address issue #2. Interceptor will now do another HEAD request to retrieve the CSRF token if the response is 403.
Added maximum number of retries for 403's.