Fetches the secret token value This is intended for use on JavaScript requests that require CSRF protection. Note that it is important that this value isn't placed in GET parameters, as this may result in the value being leaked through logging or other methods.