Apps will have a token to be identified in API calls
Safe token generation