[security] reuse league/url while generting tokens.