We have a specific scenario, where our client (our website) holds an encrypted piece of string (consider it to be an encrypted token). When our client makes a request to the ser