Attempts to GET and then POST a CSRF token

CSRF, Method 1

;; Two main methods have been suggested.
;; 1. On the front end, GET and then POST the CSRF token.
;; 2. On the back end, insert the CSRF token in the page header,
;;    and then on the front end access that attribute and POST it.

;; METHOD 1.
;; Prepared in handler.clj for GET request.
(defroutes routes
  (POST "/submit" [] home-page)
  (GET "/token" [] (generate-string {:csrf-token
                                *anti-forgery-token*})))```

;; Attempt to include in function
(defn save-stuff []
  (let [token (ajax/GET "/token")]
    (ajax/POST "/submit" {:__anti-forgery-token token})))

;; Function above is called from this button
(defn save-button [] 
  [:input {:type "button" 
           :class "btn btn-info" 
           :value "Save"
           :on-click #(save-stuff)}])


;; Attempt to include CSRF in button itself.
(defn save-button []
  [:form 
   [:input {:type "hidden"
           :name "__anti-forgery-token" 
           :value csrf-token}]]

  [:input {:type "button" 
	  :class "btn btn-info" 
	  :value "Save"
	  :on-click #(save-stuff)}])