CSRF Protection with multiple js scripts

I think the problem is each script has it's own local variables csrfName and csrfHash. When you update the variables after the ajax request has returned, you only update the local variables. It doesn't update the ones in the other script. 

Code:

// Update CSRF hash
csrfName = res.csrfName;
csrfHash = res.csrfHash;

You should probably make these variables global so both scripts can use the same variables.