Check secret token in /add.