Add handling of invalid authenticity token by throwing (and catching) an exception.