Pass a random token to an endpoint

Hi everyone. I'm thinking about adding some security to some of my custom components. I think I could do this by generating a random token on page load and checking against this token on the endpoint I call.

1. I'd pass the original token through the url, but how do I also pass this token safely to the endpoint, so it can compare the two?
2. Is the only way through a temporary cookie?
3. Does the Lithium platform have some buil-in code I can employ instead?

Thanks.