Have you tried adding it once using:
$.ajaxSetup({
headers: {
'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
}
});
and btw, the token mismatch can be because the session expired in case the user is sitting on the page for more than 30 minutes for example. So make sure in your ajax response you handle the 419 error.