Avoid sending token for cross-domain requests.

[prasad83]

I was loading Google map JS to my app.

It was making calls using XMLHttpRequest due to override in csrf-magic token was getting injected and corrupting the request expectation.