JSONP unnecessary with newer browsers; adding APP_TOKEN