Overlay — add ?tenantId=...&secret=... to the URL