Better protect against a replay attack with a random token