Add url parameter 'token' in ajax call

It's a common practice to prevent access with a token passed in url params and expressJS.

This commit allows you to access to Scribe.js in `http://yourPath/log?token=XXXXX` and keep the app working by sending `&token=XXXXX` with all AJAX requests.