Discover that the Secure Tokens are not url safe. :(