Adding missing Anti-Xsrf token validations in some Post actions

1. Also adding this validation on a AJAX only used action.
I'm just curios, why don't you use ValidateAntiForgeryToken here?