Changed the clientHash to use one_time tokens.  Also added that functionality to the system.  In addition protected the landing page from token abuse.