I have csrf protection in spring framework. So in each request I send csrf token in header from ajax call, which is perfectly working.
&
For me works variant with adding X-CSRF-TOKEN to headers.