Add a token so anyone can't trigger SMS firing