This eliminates the subscriber hack and allows us to use the check_csrf view predicate in the future by making Angular send the header that Pyramid expects.
