Add `?token=...` to every url

anonstream/routes/nojs.py

@@ -40,7 +40,7 @@ async def nojs_chat(user):
 @current_app.route('/chat/messages')
 @with_user_from(request)
 async def nojs_chat_redirect(user):
-    return redirect(url_for('nojs_chat', _anchor='end'))
+    return redirect(url_for('nojs_chat', token=user['token'], _anchor='end'))
 
 @current_app.route('/chat/users.html')
 @with_user_from(request)
@@ -83,7 +83,7 @@ async def nojs_form_redirect(user):
     else:
         state_id = None
 
-    return redirect(url_for('nojs_form', state=state_id))
+    return redirect(url_for('nojs_form', token=user['token'], state=state_id))
 
 @current_app.post('/chat/message')
 @with_user_from(request)

anonstream/templates/nojs_chat.html

@@ -128,7 +128,7 @@
   <div id="end"></div>
   <div id="notimeout"></div>
   <aside id="timeout">
-    <a class="button" href="{{ url_for('nojs_chat_redirect') }}">
+    <a class="button" href="{{ url_for('nojs_chat_redirect', token=user.token) }}">
       <header>Timed out</header>
       <small>Click to refresh</small>
     </a>
@@ -150,7 +150,7 @@
     <a class="button" href="#notimeout">Hide timeout notice</a>
   </aside>
   <aside id="timeout-alt">
-    <a class="button" href="{{ url_for('nojs_chat_redirect') }}">Click to refresh</a>
+    <a class="button" href="{{ url_for('nojs_chat_redirect', token=user.token) }}">Click to refresh</a>
   </aside>
 </body>
 </html>