Added CSRF to ajax call and additional documentation to README