- The user submitted token, if it matches a pregenerated token, it must be stored on the user's table