I can confirm, that using this script to insert the CSRF token works very well in my case. Having a fragment that is replaced in the DOM including the CSRF token in the html fragment generates a new CSRF token and subsequently fails with a 500 error