The incoming token is encoded using modified base64 encoding for URL, where
+/ is replaced with -_ to avoid percent-encoded hexadecimal representation.
См. также:
http://en.wikipedia.org/wiki/Base64#URL_applications
См. также:
http://php.net/manual/en/function.base64-encode.php#103849