$('.btn.favorite').click(function() {
    var $obj = $(this);
    var target_id = $obj.attr('id').split('_')[1];
    $obj.prop('disabled', true);
    $.ajax({
	url: $obj.attr('href'),
	type: 'POST',
	data: {target_model: $obj.attr('model'),
	       target_object_id: target_id},
	success: function(response) {
	    if (response.status == 'added') {
		$obj.children().removeClass('icon-star-empty').addClass('icon-star');}
	    else {
		$obj.children().removeClass('icon-star').addClass('icon-star-empty');}
	    $obj.parent('.favorite').children('.fav-count').text(response.fav_count);
	    $obj.prop('disabled', false);
	}
    });
});

function getCookie(name) {
    var cookieValue = null;
    if (document.cookie && document.cookie != '') {
        var cookies = document.cookie.split(';');
        for (var i = 0; i < cookies.length; i++) {
            var cookie = jQuery.trim(cookies[i]);
            // Does this cookie string begin with the name we want?
            if (cookie.substring(0, name.length + 1) == (name + '=')) {
                cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
                break;
            }
        }
    }
    return cookieValue;
}

var csrftoken = getCookie('csrftoken');
$.ajaxSetup({
    beforeSend: function(xhr) {
	xhr.setRequestHeader("X-CSRFToken", csrftoken);
    }
});

$('.btn.favorite').click(function() {
    var $obj = $(this);
    var target_id = $obj.attr('id').split('_')[1];
    $obj.prop('disabled', true);
    $.ajax({
	url: $obj.attr('href'),
	type: 'POST',
	data: {target_model: $obj.attr('model'),
	       target_object_id: target_id},
	success: function(response) {
	    if (response.status == 'added') {
		$obj.children().removeClass('icon-star-empty').addClass('icon-star');}
	    else {
		$obj.children().removeClass('icon-star').addClass('icon-star-empty');}
	    $obj.parent('.favorite').children('.fav-count').text(response.fav_count);
	    $obj.prop('disabled', false);
	}
    });
});

--- 
+++ 
@@ -1,26 +1,3 @@
-function getCookie(name) {
-    var cookieValue = null;
-    if (document.cookie && document.cookie != '') {
-        var cookies = document.cookie.split(';');
-        for (var i = 0; i < cookies.length; i++) {
-            var cookie = jQuery.trim(cookies[i]);
-            // Does this cookie string begin with the name we want?
-            if (cookie.substring(0, name.length + 1) == (name + '=')) {
-                cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
-                break;
-            }
-        }
-    }
-    return cookieValue;
-}
-
-var csrftoken = getCookie('csrftoken');
-$.ajaxSetup({
-    beforeSend: function(xhr) {
-	xhr.setRequestHeader("X-CSRFToken", csrftoken);
-    }
-});
-
 $('.btn.favorite').click(function() {
     var $obj = $(this);
     var target_id = $obj.attr('id').split('_')[1];
Remove jQuery ajax CSRF headers setting

This should not be done by a library, this is standard Django configuration that should be in any project that uses ajax posting.
Also, this conflicts with custom CSRF settings, like different cookie name.