added admin_token to provide basic CSRF protection for associator and borrowing interface in Reason admin