Rails - May 2009 - authenticity_token and Flash - plus sign not recognizing

OK I need to send the auth token to Flash. I can get it, but for some
reason the + signs in the auth code are showing up as spaces. Anyone
know why? or how to get around this?

Also, if I send the authenticity_token back to rails, to I have to set
it using auth_token= params[...] or anything? Not sure what to set.