First pass at one time token based authentication