SPAs usually pass on a CSRF token for use in subsequent requests, is there a roach way of scraping such sites?