secure token generation, and prep for test suite