Append xsrf_token if defined to API calls.