Allow plugins to submit security token via GET request