Extracting implicit auth token from URL

[BarryCarlyon]

Separate post. it’s unrelated to this/op’s thread.