CSRF token to headers for AJAX POST. Fix for #113

This is how you do a JS post with the CSRF Protection

```
$.ajax({
url: "http://test.com",
type:"post"
headers: {'X-CSRF-Token': $('meta[name="csrf-token"]').attr('content')}})
```
Change token to _csrf
Change token to _csrf
Change token to _csrf
Merged view
Merge pull request #3 from GeneralZero/patch3

Patch3