diff --git a/lib/travis/api/app/endpoint/authorization.rb b/lib/travis/api/app/endpoint/authorization.rb
index e45fdc87..305adb30 100644
--- a/lib/travis/api/app/endpoint/authorization.rb
+++ b/lib/travis/api/app/endpoint/authorization.rb
@@ -420,8 +420,10 @@ function uberParent(win) {
 }
 
 function sendPayload(win) {
-  var payload   = <%= user.to_json %>;
-  payload.token = <%= token.inspect %>;
+  var payload = {
+    'user': <%= user.to_json %>,
+    'token': <%= token.inspect %>
+  };
   uberParent(win).postMessage(payload, <%= target_origin.inspect %>);
 }