If the token argument to formatURL is null, it should be rendered as the empty string and not the string 'null'. Should fix #1316 in which Safari gets a 403 error when visiting the key/value page in the web UI.