The tokens screen now generates a QR code that can be consumed by the Android client. On the "login" screen on the Android client, there could be a "Scan QR Code" button. Once scanned, the QR code decodes to "key,secret" or "key,secret,expiresAt" (if a token has the expiration date).