Paste the JWT your MAS operator delivered to you. The token is stored in a server-side cookie and never reaches the browser's JS heap.