Require tokens for post actions

Fixes security bug 49785.

Change-Id: I1a914abdf025e216eb9f62a7d6967078d1173cd2
Merge "Require tokens for post actions"