Testing needed. Does not use the token inherent in all Drupal forms but rather relies still on a custom token in the same manner as the 4.7 module.
