Suggestion: User the uploader without token

[gdgp]

One thing that kept me from using vimeo-upload is that I would have to expose my access token which does not seem like a good idea since it seems to me that it can more easily be used for other unintended purposes.

However, aside from that the functionality provided is indeed very useful and as such I just wanted to make the suggestion that a possible extension would be to enable you to use it with a vimeo upload_link_secure instead of a token. This would enable a webdev to request the upload url in the server side, keep the token hidden and just pass the upload url for the vimeo-upload (on the frontend side). I think this would just skip some steps in the code already implemented.

Just a suggestion!