Keep getting the error "CSRF token mismatch"

Do not disable csrf. Get that token and pass it along with the Ajax request.

Also not to have to re write code I did this guide in laravel:

https://laracasts.com/discuss/channels/guides/jquery-ajax-post-example

I use

$post._token = document.getElementsByName("_token")[0].value

in laravel, so will be similar in cake.
Replace _token with the name of token in cake.

Don’t disable csrf.

Really if you are new to JS and ajax, you should study it first via some tutorials and maybe Youtube videos. The forums keep getting these questions, where all it takes is a couple of tutorials first.