updated default embedded ajax_csrf script