Ohhh, nm. USER_DATA gets replaces with the content of what it points to if it is a URL. so C10N_TOKEN just needs to be set to USER_DATA prior to that request.