A few calls to werr() were passing tokens rather than looking them up first.
Attach a file by drag & drop or click to upload
