show url-encoded tokens + cleanups