Revised domain.

Now the client has the responsibility of generating security tokens.
This is a major security shift that prevents clear sensitive information
to be transmitted through the wire.