Paste the bearer token (data/decision_service.token on the Mac). It is stored only in this browser's localStorage and sent as an Authorization header. It never appears in a URL.