Tiny Fetch API wrapper to handle CSRF token
