generate new OT token for each request