Comment 3 for bug 1845243

Without knowing the full details or history behind why noVNC changed, it seems like nesting the token within the path is a hack and I agree that reducing the scope of that to only noVNC (option 1) seems ideal rather than build a hack in nova (option 2) to deal with the original hack. I don't know how simple option 1 is though.