Html forms, auth token: fixes