Prefer your invite link (one click). Break-glass: paste the access token below. It becomes an HttpOnly cookie — never put a secret in the address bar.