Consuming Your API With JavaScript: CSRF Protection

Window.axios.defaults.headers.common = {
    'X-Requested-With': 'XMLHttpRequest',
};