verify users by password (no work done on incorrect entries...yet) before sending token for subittal -> added new before_filter to give the incoming posts from Android the required csrf token