insertToken() should accept Ajax resp. file URL

Fixes #1