Dynamically generate secret token (rather than hard-coded)