actually generate a token...