session: Send session token with any POST requests, so you can't 'accidentally' do something drastic to your account if someone sends you a link or something
Merge pull request #10 from nasonfish/master

session: Send session token with any POST requests