I've created a web application using the Javascript API that sends a call to the REST API for a secured FeatureServer layer. The URL of the call is: https://cvag01.mojavedata.gov/ArcGIS/rest/services/admin/Ownership_Editor/FeatureServer/query?f=json&returnGeometry=true&spatialRel=esriSpatialRelIntersects&geometry=%7B%22x%22%3A-12937603.591094663%2C%22y%22%3A3996743.738186366%2C%22spatialReference%22%3A%7B%22wkid%22%3A102100%7D%7D&geometryType=esriGeometryPoint&inSR=102100&outFields=APN%2COWNER%2CCONS_STATUS%2CPOST_MOU%2CACQ_DATE%2CCREDIT_STATE%2CCREDIT_PERMITTEE%2CCREDIT_COMP&outSR=102100&token=<<token removed>>
The response from the server is:{"error":{"code":400,"message":"Unable to complete operation.","details":["Invalid URL"]}}
I've played around with removing different parameters from the URL and this error only occurs with the token parameter specified. I've checked the Verbose server logs in ArcGIS Server Manager, but I see no errors there.
