"I changed 'itok' to a profanity, and also removed it entirely, and it still worked. Also did it from a somewhat-sandboxed browser, just in case."
Wow, so much work. Good job!
"Did you need to include the 'itok' part on the link?"
Apparently not, if you say that it works without it...
"Or does it now always show up as "you" surfing that site when people try the link?"
I'm not registered there (besides, I got the bigger sandbox). Therefore, I'm guessing - no.
"What was the point, again?"
(Feel free to remove as much as you like and don't forget to report back.)