per anne
make generate token a safe url