Using token from Flask session when validating. Fixes #38.