Exposed token in `http://localhost:<port>/neutralino.js` route #351