authenticity token for choice