A better option would be to use the jQuery ajaxSetup method to add csrf_token for each request.
It is as simple as adding this line of code (outside your baseline code):
$.ajaxSetup({ data: { 'csrf_token' : '12345' }});
Since Backbone uses jQuery for all its ajax communication, csrf_token will be included in every ajax request.
See the blog post for more details.
source share