What is the best way to handle CSRF tokens in scripts that use the REST API?

In XNAT 1.5.4 the cross site request forgery protection demands a token when you post data. What's the preferred way to get or bypass that token?

Details:
Feel free to add details, link to an ongoing discussion in the XNAT Google Group, and so on.