put CSRF only for POST

scripts/utils.js

@@ -54,10 +54,10 @@ export async function request (path, method, body = null, auth = true) {
 	}
 	if(method === "POST") {
 		content.body = prms.toString();
+		content.headers.CSRFPreventionToken = getCookie("CSRFPreventionToken");
 	}
 	if(auth) {
 		content.headers.Cookie = document.cookie;
-		content.headers.CSRFPreventionToken = getCookie("CSRFPreventionToken");
 	}
 
 	let response = await fetch(`https://pve.tronnet.net/api2/json${path}`, content)