This token is completly useless since an attacker can easily extract it
from the page.