Use token to secure generated.php