Get url for upload window when link clicked

It contains an auth token that refreshes now and then, so can't be
generated just once.