Make csrf_token global

(imported from commit 734d9c886c3a77d2ba40bd449cb089a00807a656)

tools/jslint/check-all.js

@@ -31,7 +31,7 @@ var globals =
     + ' initiate_search'
 
     // setup.js
-    + ' loading_spinner templates'
+    + ' loading_spinner templates csrf_token'
 
     // subs.js
     + ' subs'

zephyr/static/js/setup.js

@@ -3,6 +3,7 @@
 
 var loading_spinner;
 var templates = {};
+var csrf_token;
 $(function () {
     // Display loading indicator.  This disappears after the first
     // get_updates completes.
@@ -21,13 +22,13 @@ $(function () {
     );
 
     // This requires that we used Django's {% csrf_token %} somewhere on the page.
-    var csrftoken = $('input[name="csrfmiddlewaretoken"]').attr('value');
+    csrf_token = $('input[name="csrfmiddlewaretoken"]').attr('value');
 
     $.ajaxSetup({
         beforeSend: function (xhr, settings) {
             if (!(/^http:.*/.test(settings.url) || /^https:.*/.test(settings.url))) {
                 // Only send the token to relative URLs i.e. locally.
-                xhr.setRequestHeader("X-CSRFToken", csrftoken);
+                xhr.setRequestHeader("X-CSRFToken", csrf_token);
             }
         }
     });