service to generate url tokens
filter to protect controllers with tokens