a token used by a client must be generated from a server which is the same version as the client