Automatically create filenames.

Uploaded files are now named by the device name and date.
Check POST for access token.

This is in addition to the session anti-forgery token.