This extension will remove the token from the address bar when navigating in the admin area
The Synchronizer Token Pattern is implemented in opencart for security reasons removing its functionality could leave your store vulnerable to CSRF attacks.


What is "Synchronizer Token Pattern"
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_%28CSRF%29_Prevention_Cheat_Sheet#CSRF_Prevention_without_a_Synchronizer_Token

Other security steps can be taken to increase opencart admin security. Visit for more information
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_%28CSRF%29_Prevention_Cheat_Sheet#Client.2FUser_Prevention