handoffToken

What binds the sign-in to the first browser that opens it. It goes in the page's fragment, which no server sees. Gone once the sign-in is over.