add auth token to forms