Iframe loading raw token URL with `?`