update dynamic setting of js authenticity token var