since it's on the query string it needs to be as short as possible to avoid hitting URL limits (the token can be long). Instead of one letter I went with two and added a comment here explaining it.