https://stevenroland.com/posts/using-csrf-tokens-with-ajax-in-php