This link would be generated with a `?token=<hash>?inline=true` when it should be `?token=<hash>&inline=true`. This was causing 401 Unauthorized errors because `URL.Query().Get("token")` would return the empty string and so (authenticateShareRequest)[dee465ab86/http/public.go (L126)] would try to verify the password in the header, which doesn't exist for these requests.