Extracting the CSRF cookie for reuse in an AJAX patterned call context

tasks.js

function(item, payload) {
    const possibleReminder = payload.get('upgrade').map(upgrade => {

        const task = {
            title: upgrade.args.title,
            text: upgrade.args.description,
            importance: 10,
            reminders: []
        };

        var conf = getConfig('pathify_configurations').get();
        const body = JSON.stringify(task).getBytes("UTF-8");

        var csrf;
        payload.getState().get('req').map(req => 
            toKVMap(req.headers()).get('Cookie').map(cookies => {
                csrf = cookies.match(new RegExp("csrftoken=(.+?);"))[1];
        }))

        return [
            new code_data_generic_ApiRequest(
                conf['api-url'] + '/v1/users/me/tasks/',
                'POST',
                Some(body),
                toKVList([
                    ['Content-Type', 'application/json'],
                    ['X-CSRFToken', csrf]
                ])
            )
        ];
    }).getOrElse(_.constant([]));
    return possibleReminder;
}