Replaced user-side token generation with server-side process.