[foobarandgrill]

I'd imagine it's a token in the request headers

[__david__]

I doubt it's request headers since that would require the podcast player to set them. Putting it in the URL itself would make it work with every player on the planet.