Do GenerateToken call after form validation

This helps to avoid token timeout that was happening when we
obtained the token at initial form generation.

Change-Id: Ic99adf44d38a34cbcc28cc730effd048dbe07da5