Same as static-html-test.html,
but the embedded URL carries a ?session=... token, the
way a real site's signed/expiring stream URL would. Since the whole
string - token included - is still a literal value in the page
source, static-html-regex should still find it, token
and all.