You must provide the token paramater to the iFrame.