Joining an app now generates a unique token and redirects