The tutorial seemed to be updated to use 4.0.1
custom token generator to avoid having to store secret key in git repository