$http interceptor to enable csrf for cross domain requests