🔒 Add ?token=… to the URL