added TODO
generate a request token and return it.