Best practice to generate token for email action

Best practice to generate token for email action