So, our options are: 

* Put a ProxyPassMatch in an Apache config file.
* Flip this whole thing around. Make the shorter URL the canonical URL and have the longer URL redirect there.
* Just shorten the hash. We're using SHA-256 which results in a 64-byte hash. Use something shorter.
* Continue using SHA-256 but truncate the last X characters, perhaps based on the hostname so that it fits just into 116 chars.

I'm leaning towards just changing the `sha256` in `generateToken()` inside `web/application/third_party/Ilios/PasswordUtils.php` to `sha1` (which will result in a 40-byte hash rather than a 64-byte hash). Old tokens that have worked should continue to work as it's just a database lookup.