[wms] - first look at token generator/validator