Paste the operator token. It will be exchanged for an HttpOnly session cookie and never stored in JS-readable storage.