Generate the secret token on first request.