#19 fix

switch headers to request csrf token, because header dont sends on
window with file input
#19 fix