test dynamic header

js/headfoot.js

@@ -22,10 +22,23 @@ function userAuthenticated(){
 }
 
 
+function readCookie(name) {
+    var nameEQ = encodeURIComponent(name) + "=";
+    var ca = document.cookie.split(';');
+    for (var i = 0; i < ca.length; i++) {
+        var c = ca[i];
+        while (c.charAt(0) === ' ')
+            c = c.substring(1, c.length);
+        if (c.indexOf(nameEQ) === 0)
+            return decodeURIComponent(c.substring(nameEQ.length, c.length));
+    }
+    return null;
+}
+
 function sendRequest(URL){
     let xhr = new XMLHttpRequest();
     xhr.open("POST", URL, true);
-    let token = $("meta[name='_csrf']").attr("content");
+    let token = readCookie("XSRF-TOKEN");
     //Send the proper header information along with the request
     xhr.setRequestHeader('X-CSRF-TOKEN', token);
     xhr.send();