send authenticity token with upload params for local storage

test plan:
 * use local storage
 * upload a file by clicking "Upload Files"
 * it should work

Change-Id: Ia46bde6ab042f21cd0643d4f5a1dbd2f7f9cee66

Conflicts:
	lib/api/v1/attachment.rb