Add support for setting the auth_token via a request param
Link to the privacy page from /about