add authenticity tokens. Users must sign in to add comments/links.