Pass in authenticity token

Fixes #481
Fixes #470