DRAW BADLY. BROADCAST GLOBALLY.
The display link is safe to leave open. The controller needs the private token set in your .env.
.env