Cleaned up environment-specific configuration data
Added support for CSRF authentication for AJAX requests