Javascript Form Csrf Protection