How can a client create a random token that the API server will expect

Question

Background

In my already working system, to login I have to send the username, and the salted password hash to my API server so that the server can give me a client