Bug 1026426 — Handle short URLs

as per discussion, let's have `req.callUrlData` and `req.token` be two different things.