This simulates the parent application authenticating with the shared backend.
Or send a token manually:
/embed/notes
/embed/quick-add