Context

Token creation returns 200 instead of redirecting, so a reload creates a duplicate token