Secure Token: configure access with tokenized URLs