Mostly concerning the auth_token. Where do we get it from? Is it the CSRF token spoken about here -> http://pusher.com/docs/client_api_guide/client_connect or is it just something we choose ourselves?