Tokens with the "request" param need to be part of  the URL. Fixes #731