Why is this wrapped in quotations as if it's server side, but no actual server side tokens are used?