✅ With token (should show the banana page)
https://banana-spike-mw565wj2.demos.abodemoney.com/?token=4fE_…
🔒 Without token (should say Unauthorized)
https://banana-spike-mw565wj2.demos.abodemoney.com/
Parent page host:
https://banana-spike-mw565wj2.demos.abodemoney.com/?token=4fE_…
https://banana-spike-mw565wj2.demos.abodemoney.com/