using authenticity token for moving and resizing events