Functions for creating, reading and deleting tokens, which are keys associated with data, are public to derived applications. application.class uses them to create form URL parts.