Attempt to fix drag and drop upload

After a lot of investigation, I discovered that the authenticity token wasn't being passed on the initial drag and drop uploaad. This should fix it.