Generate and hide secret token