allow token to be passed in URL query

[eroux]

this won't be a normal path but for the purpose of getting the app to give the best user experience, it should open the final PDF download link in the main web browser. But this main web browser needs to be logged in for the PDF download to work.

Here's one possible way this could work: a GET endpoint /setcookie, with two URL params:

• token with the token
• redirect with the path to a URL to redirect to

it would just set the cookie and redirect to the URL given as parameter