[server] generate a new token for each repo download