Generate secret token rather than hard code it