Add authenticity token