Remove VizController#index. It leaked tokens.