Ensure CSRF token on AJAX views.