Eventually force a secure token through session, can be used to sub-call the ui for PDF generation