Just return the token relative URL as login. It should "look like a token" enough to be obvious.
Attach a file by drag & drop or click to upload
