now using node-uuid (uuidv4) for the tokens and secrets (to be replaced later?)