diff --git a/app/controllers/events_controller.rb b/app/controllers/events_controller.rb
index 4cf2c24..f93cae9 100644
--- a/app/controllers/events_controller.rb
+++ b/app/controllers/events_controller.rb
@@ -8,7 +8,7 @@ class EventsController < ApplicationController
   def index
     respond_to do |format|
       format.js do
-        json = events.to_json(eager_options(:root => "events", :include => { :tagged_items => { :only => [:amount, :id], :methods => :name }, :line_items => { :only => [:account_id, :bucket_id, :amount, :role], :methods => [] }}))
+        json = events.to_json(eager_options(:root => "event", :include => { :tagged_items => { :only => [:amount, :id], :methods => :name }, :line_items => { :only => [:account_id, :bucket_id, :amount, :role], :methods => [] }}))
 
         render :update do |page|
           page << "Events.doneLoadingRecalledEvents(#{json})"
diff --git a/public/javascripts/events.js b/public/javascripts/events.js
index 072ca0d..9d691c5 100644
--- a/public/javascripts/events.js
+++ b/public/javascripts/events.js
@@ -469,6 +469,9 @@ var Events = {
 
       options.method = "post";
       options.contentType = "application/xml";
+      options.requestHeaders = {
+        'X-CSRF-Token': $F(form['authenticity_token'])
+      };
       options.postBody = Events.buildXMLStringFor(Events.serialize(form));
 
       return new Ajax.Request(action, options);