Your token stays out of the address bar. A trusted browser can remember your sign-in for up to 180 days.