javascript csrf token

add this stuffs to the top of your JS file, this way you don't need @CSRF_EXEMPT on the view. Making things a lil bit more secure i guess. lol