authenticity_token and Flash - plus sign not recognizing

OK I need to send the auth token to Flash. I can get it, but for some reason the + signs in the auth code are showing up as spaces. Anyone know why? or how to get around this?

Also, if I send the authenticity_token back to rails, to I have to set it using auth_token= params[...] or anything? Not sure what to set.