Use event-positions library instead of manipulating DOM

[felixfbecker]

trafficstars

https://github.com/sourcegraph/event-positions

needs #21 because the token would not be its own span anymore.