user token generation is now done by wordlist