dynamically generating a secret token