[mmanulis]

Why not pass the token as an HTTP header? e.g. X-RESET-TOKEN=foo and then read that via JS

[dom0]

How exactly do you encode a HTTP header into an URL?

[derekprior]

You can't set an HTTP Header with an HTML link.

Would be nice to set a body though, wouldn't it? Also, not allowed by HTML.