Remove not needed csrf token

Check is managed at ajax level
Use proper variable name for achilles transport
Fix form handling in example app