generate a token when user requests to track a github repo so not just anyone can send a fake API request