Browsers are good. Tried it with chrome and FF, both in incognito and regular, with and without extensions. Cleared cache etc. Now I did make a new game with LMoP and that did work, it allowed me to add tokens to the token layer as normal. Here's a console log of when I join the game up to trying to add a token to the token layer. Content Security Policy: The page’s settings blocked the loading of a resource at self (“script-src <a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a> 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com”" rel="nofollow">http://stun.l.google.com”</a>). Source: window.NREUM||(NREUM={});NREUM.info={"be.... editor:12 Content Security Policy: The page’s settings blocked the loading of a resource at self (“script-src <a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a> 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com”" rel="nofollow">http://stun.l.google.com”</a>). Source: window.NREUM||(NREUM={}),__nr_require=fu.... editor:13 70 app.js:31:3874 TOUCH SUPPORTED: false app.js:31:29088 USING WEBGL ACCELERATION... app.js:31:29909 WEBGL STARTUP SUCCESS app.js:31:30498 Custom Sheet Translation app.js:33:13872 Content Security Policy: The page’s settings blocked the loading of a resource at data:application/javascript;base64,KGZ1b... (“script-src <a href="https://app.roll20.net" rel="nofollow">https://app.roll20.net</a> 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net <a href="https://partner.googleadservices.com" rel="nofollow">https://partner.googleadservices.com</a> <a href="https://www.googletagservices.com" rel="nofollow">https://www.googletagservices.com</a> <a href="https://ssl.google-analytics.com" rel="nofollow">https://ssl.google-analytics.com</a> <a href="https://www.google-analytics.com" rel="nofollow">https://www.google-analytics.com</a> <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> <a href="http://ajax.googleapis.com" rel="nofollow">http://ajax.googleapis.com</a> <a href="https://d3clqjduf2gvxg.cloudfront.net" rel="nofollow">https://d3clqjduf2gvxg.cloudfront.net</a> <a href="https://cdn.firebase.com" rel="nofollow">https://cdn.firebase.com</a> https://*.firebaseio.com https://*.tokbox.com https://*.opentok.com <a href="http://static.opentok.com" rel="nofollow">http://static.opentok.com</a> <a href="http://www.google-analytics.com" rel="nofollow">http://www.google-analytics.com</a> <a href="http://cdn.crowdin.com" rel="nofollow">http://cdn.crowdin.com</a> <a href="https://crowdin.com" rel="nofollow">https://crowdin.com</a> <a href="http://stun.l.google.com”" rel="nofollow">http://stun.l.google.com”</a>). (unknown) RTCIceServer.url is deprecated! Use urls instead. app.js:25 select app.js:26:19540 Switch mode to select app.js:26:21386 Initializing new dice engine with randomness... app.js:42:27868 Using random entropy app.js:42:27945 Compiling sheet... app.js:46:5680 Found rolltemplate: simple app.js:46:5963 Found rolltemplate: atk app.js:46:5963 Found rolltemplate: dmg app.js:46:5963 Found rolltemplate: atkdmg app.js:46:5963 Found rolltemplate: desc app.js:46:5963 Found rolltemplate: spell app.js:46:5963 Found rolltemplate: npc app.js:46:5963 Found rolltemplate: npcatk app.js:46:5963 Found rolltemplate: npcdmg app.js:46:5963 Found rolltemplate: npcaction app.js:46:5963 Found webworker script app.js:46:6502 Finding sheet rolls... app.js:46:6957 window resize app.js:47:30676 Final set zoom! app.js:32:9943 UPDATE GL SIZE! app.js:31:23638 Final set zoom! app.js:32:9943 tuts loaded tutorial_tips.js:7:2 Use of getPreventDefault() is deprecated. Use defaultPrevented instead. jquery.1.8.2.min.js:2:40278 Loading mixed (insecure) display content “<a href="http://imgsrv.roll20.net/?src=i.imgur.com/ZgULBCp.png”" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/ZgULBCp.png”</a> on a secure page[Learn More] jquery.1.8.2.min.js:2:70985 Loading mixed (insecure) display content “<a href="http://imgsrv.roll20.net/?src=i.imgur.com/3OxOqmb.png”" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/3OxOqmb.png”</a> on a secure page[Learn More] jquery.1.8.2.min.js:2:70985 Loading mixed (insecure) display content “<a href="http://imgsrv.roll20.net/?src=i.imgur.com/py5B0cm.png”" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/py5B0cm.png”</a> on a secure page[Learn More] jquery.1.8.2.min.js:2:70985 Loading mixed (insecure) display content “<a href="http://imgsrv.roll20.net/?src=i.imgur.com/LoT21n1.png”" rel="nofollow">http://imgsrv.roll20.net/?src=i.imgur.com/LoT21n1.png”</a> on a secure page[Learn More] jquery.1.8.2.min.js:2:70985 GET <a href="http://imgsrv.roll20.net/" rel="nofollow">http://imgsrv.roll20.net/</a> [Mixed Content] [HTTP/1.1 200 OK 0ms] GET <a href="http://imgsrv.roll20.net/" rel="nofollow">http://imgsrv.roll20.net/</a> [Mixed Content] [HTTP/1.1 200 OK 0ms] GET <a href="http://imgsrv.roll20.net/" rel="nofollow">http://imgsrv.roll20.net/</a> [Mixed Content] [HTTP/1.1 200 OK 0ms] GET <a href="http://imgsrv.roll20.net/" rel="nofollow">http://imgsrv.roll20.net/</a> [Mixed Content] [HTTP/1.1 200 OK 0ms] Use of getAttributeNode() is deprecated. Use getAttribute() instead. jquery.1.8.2.min.js:2:31678 Use of attributes’ nodeValue attribute is deprecated. Use value instead. app.js:46:8954 Starting up WEB WORKER sheetsandboxworker.js:250:2 Final page load. app.js:38:8499 Refresh jukebox List! app.js:48:2355 Auth'ed. app.js:37:17244 Go post auth! app.js:37:17441 initial setup app.js:37:17586 Refresh jukebox List! app.js:48:2355 Object { attributes: Object, _escapedAttributes: Object, cid: "c0", changed: Object, _silent: Object, _pending: Object, _previousAttributes: Object, activePage: bound (), showSettings: bound (), initActivePage: bound (), 22 more… } app.js:35:21002 Got players value... app.js:37:17828 joining game... app.js:37:24696 Player -KOvA34aQjLhW8p1P-wO is offline... app.js:35:27936 Global Volume: 100=1 app.js:36:4778 Player -KPZqFo-UxktS6hOMOhe is offline... app.js:35:27936 Deferred finish joining... app.js:37:24786 Firebase Online app.js:31:5180 refershing page listings! app.js:40:32616 Full load page! app.js:35:122 We have 36 pages app.js:37:18646 Refresh jukebox List! app.js:48:2355 Scan for new plays! app.js:38:5321 handle page changes app.js:37:19186 false app.js:37:19267 Do refresh link cache! app.js:33:25523 Refresh jukebox List! app.js:48:2355 Refresh Journal List! app.js:45:18601 Search took 246ms app.js:45:17453 This site appears to use a scroll-linked positioning effect. This may not work well with asynchronous panning; see <a href="https://developer.mozilla.org/docs/Mozilla/Performance/ScrollLinkedEffects" rel="nofollow">https://developer.mozilla.org/docs/Mozilla/Performance/ScrollLinkedEffects</a> for further details and to join the discussion on related tools and features! editor init active page! app.js:37:23649 activate page! app.js:35:2284 FULLY ACTIVATE VIEWS FOR PAGE. app.js:35:2516 "Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/62010/B8ljC1zqTueNyET3PGzDeg/thumb.jpg?14253340905" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/62010/B8ljC1zqTueNyET3PGzDeg/thumb.jpg?14253340905</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/62010/B8ljC1zqTueNyET3PGzDeg/original.jpg?14253340905" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/62010/B8ljC1zqTueNyET3PGzDeg/original.jpg?14253340905</a>" app.js:34:16213 "Swapping <a href="https://s3.amazonaws.com/files.d20.io/marketplace/62014/wQj0b_j7yAW1trHNIMaJpw/thumb.jpg?14253341055" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/62014/wQj0b_j7yAW1trHNIMaJpw/thumb.jpg?14253341055</a> to <a href="https://s3.amazonaws.com/files.d20.io/marketplace/62014/wQj0b_j7yAW1trHNIMaJpw/original.jpg?14253341055" rel="nofollow">https://s3.amazonaws.com/files.d20.io/marketplace/62014/wQj0b_j7yAW1trHNIMaJpw/original.jpg?14253341055</a>" app.js:34:16213 Applying filter app.js:34:15630 Object { _source: Array[4] } app.js:30:26544 new lamp app.js:31:15332 setting src app.js:34:16374 Cols: 3 Rows: 3 app.js:30:12217 Took 133ms to generate cache. app.js:30:12893 Cols: 3 Rows: 3 app.js:30:12217 Took 131ms to generate cache. app.js:30:12893 Graphics: 78 app.js:35:1463 Paths: 69 app.js:35:1659 new caster! app.js:31:12605 refershing page listings! app.js:40:32616 Reorder by ZORDER app.js:35:5167 new lamp app.js:31:15332 Body drop! app.js:47:27277 drop on upper canvas app.js:47:5110 FIREBASE WARNING: Exception was thrown by user callback. .drop/</<@<a href="https://app.roll20.net/assets/app.js?1490198170:47:10341" rel="nofollow">https://app.roll20.net/assets/app.js?1490198170:47:10341</a> d20.models.Character<._getLatestBlob/<@<a href="https://app.roll20.net/assets/app.js?1490198170:39:17180" rel="nofollow">https://app.roll20.net/assets/app.js?1490198170:39:17180</a> h.Zb/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:201:708" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:201:708</a> gc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:52:165" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:52:165</a> cc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:30:216" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:30:216</a> dc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:29:1259" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:29:1259</a> Ii/this.M<.af/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:218:393" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:218:393</a> Uh/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:183:1" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:183:1</a> h.Ld@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:188:104" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:188:104</a> Eh.prototype.Ld@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:178:359" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:178:359</a> Gh/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:176:278" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:176:278</a> yh@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:170:462" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:170:462</a> vh.prototype.open/this.La.onmessage@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:169:245" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:169:245</a> firebase.2.4.0.js:45:446 SyntaxError: JSON.parse: unexpected end of data at line 1 column 1 of the JSON data[Learn More] app.js:47:10341 Body drop! app.js:47:27277 drop on upper canvas app.js:47:5110 FIREBASE WARNING: Exception was thrown by user callback. .drop/</<@<a href="https://app.roll20.net/assets/app.js?1490198170:47:10341" rel="nofollow">https://app.roll20.net/assets/app.js?1490198170:47:10341</a> d20.models.Character<._getLatestBlob/<@<a href="https://app.roll20.net/assets/app.js?1490198170:39:17180" rel="nofollow">https://app.roll20.net/assets/app.js?1490198170:39:17180</a> h.Zb/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:201:708" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:201:708</a> gc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:52:165" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:52:165</a> cc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:30:216" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:30:216</a> dc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:29:1259" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:29:1259</a> Ii/this.M<.af/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:218:393" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:218:393</a> Uh/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:183:1" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:183:1</a> h.Ld@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:188:104" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:188:104</a> Eh.prototype.Ld@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:178:359" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:178:359</a> Gh/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:176:278" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:176:278</a> yh@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:170:462" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:170:462</a> vh.prototype.open/this.La.onmessage@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:169:245" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:169:245</a> firebase.2.4.0.js:45:446 SyntaxError: JSON.parse: unexpected end of data at line 1 column 1 of the JSON data[Learn More] app.js:47:10341 Body drop! app.js:47:27277 drop on upper canvas app.js:47:5110 FIREBASE WARNING: Exception was thrown by user callback. .drop/</<@<a href="https://app.roll20.net/assets/app.js?1490198170:47:10341" rel="nofollow">https://app.roll20.net/assets/app.js?1490198170:47:10341</a> d20.models.Character<._getLatestBlob/<@<a href="https://app.roll20.net/assets/app.js?1490198170:39:17180" rel="nofollow">https://app.roll20.net/assets/app.js?1490198170:39:17180</a> h.Zb/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:201:708" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:201:708</a> gc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:52:165" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:52:165</a> cc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:30:216" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:30:216</a> dc@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:29:1259" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:29:1259</a> Ii/this.M<.af/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:218:393" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:218:393</a> Uh/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:183:1" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:183:1</a> h.Ld@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:188:104" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:188:104</a> Eh.prototype.Ld@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:178:359" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:178:359</a> Gh/<@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:176:278" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:176:278</a> yh@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:170:462" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:170:462</a> vh.prototype.open/this.La.onmessage@<a href="https://app.roll20.net/assets/firebase.2.4.0.js:169:245" rel="nofollow">https://app.roll20.net/assets/firebase.2.4.0.js:169:245</a> firebase.2.4.0.js:45:446 SyntaxError: JSON.parse: unexpected end of data at line 1 column 1 of the JSON data[Learn More] app.js:47:10341