getLimitedUseToken

Returns a new limited-use token, for a backend with replay protection; getToken unless overridden.