[Koha-bugs] [Bug 43304] Add global CSRF header injection for legacy jQuery.ajax API calls