Csrf with json

Json_csrf.txt

beforeSend: function(req) {
                req.setRequestHeader('X-CSRF-Token', "<%= csrf_token %>");
            }

...

    my $c = shift;

    return($c->render(json => {success => 0, message => "No JSON found" })) unless $c->req->json;

    $c->req->json->{csrf_token} = $c->req->headers->header('X-CSRF-Token');
    my $validation = $c->validation->input($c->req->json);

    return $c->render(json => {success => 0, message => "CSRF token invalid"})
        if $validation->csrf_protect->has_error('csrf_token');

    $validation->required('account_email', 'trim')->email;