https://fmbase.tw/blog/2013/01/15/codeigniter_csrf_protection_with_ajax/