Missing switch

Added xss_clean switch for the token input.