csrf protection

csrf protection for developers
This gives the impression that if I'm already using jQuery and jQuery UI (in any way at all) then I don't need to do anything (as if the jQuery library itself will give you CSRF token). Maybe should say:
If you are already using the custom :ref:`jQuery include statement <jquery_and_jquery_ui>` then this will also add a script that does this for you. Otherwise simply import the script
(I don't think you need 'setting the header on your AJAX request').