Level 9
If you aren't using blade for your AJAX responses change {!! csrf_token !!} to
Or you can put {!! csrf_token() !!} in a meta tag, and every ajax POST call you make, automatically grabs the token for you.
Or something similar to this link http://engageinteractive.co.uk/blog/csrf-protection-with-ajax-and-laravel which just inlines the token instead of putting it in a meta tag.