Add note about Ajax and CSRF-Token [ci skip]
Merge pull request #18105 from andreynering/guides-csrf

Add note about Ajax and CSRF-Token [ci skip]