Add token verification and \s+ into fill-day-worktime.cgi