urlTokenUsable

Whether the url form can carry token. On URL_SAFE_TOKEN percent- and form-decoding are both the identity, so the url value compares as it arrived; off it they disagree on + and nothing between the config file and the url is an encoder that could settle it. The header carries any token, so only this spelling drops.