Use config() and $httpProvider instead of run() to set X-CSRFToken.