Load token protected actions package from repo
Add tests, use input::all instead of get on controller