mmm, I want to do it. I'll keep looking into it. There's two ways that create gets called, maze builder and artist builder. Maze builder was easy because it's a form and I could just add the hidden field with the auth token. But artist builder is an ajax post. It seems I can't get to the current auth token. I'll keep investigating. ty