Added CSRF token to all AJAX POSTs