diff --git a/modules/backend/assets/js/backend.js b/modules/backend/assets/js/backend.js
index 97f44aa83..ce18301f8 100644
--- a/modules/backend/assets/js/backend.js
+++ b/modules/backend/assets/js/backend.js
@@ -10,6 +10,7 @@ $.ajaxPrefilter(function(options) {
     var token = $('meta[name="csrf-token"]').attr('content')
 
     if (token) {
+        if (!options.headers) options.headers = {}
         options.headers['X-CSRF-TOKEN'] = token
     }
 })
diff --git a/modules/backend/assets/js/october-min.js b/modules/backend/assets/js/october-min.js
index ab65af51c..b924c9cb9 100644
--- a/modules/backend/assets/js/october-min.js
+++ b/modules/backend/assets/js/october-min.js
@@ -5063,7 +5063,8 @@ $.fn.sidenavTree.Constructor=SidenavTree
 $.fn.sidenavTree.noConflict=function(){$.fn.sidenavTree=old
 return this}
 $(document).ready(function(){$('[data-control=sidenav-tree]').sidenavTree()})}(window.jQuery);$.ajaxPrefilter(function(options){var token=$('meta[name="csrf-token"]').attr('content')
-if(token){options.headers['X-CSRF-TOKEN']=token}})
+if(token){if(!options.headers)options.headers={}
+options.headers['X-CSRF-TOKEN']=token}})
 $(window).on('ajaxErrorMessage',function(event,message){if(!message)return
 swal({title:message,confirmButtonClass:'btn-default'})
 event.preventDefault()})