Always a file, pass token in QS

Folders are not part of Git, so it's always a file
token needs to be passed in the querystring also