Add session token to form to curb spam