Adding csrf token to ajax request