Last modified: 2012-12-13 11:21:54 UTC
In EditEntity.php:attemptSave(), please check the token by default (or set $token=null, so the check fails), and explicitly pass in a value when you want to bypass the checking.
Verified in Wikidata demo time for sprint 18