Generate client token (todo: move to better spot)