This way, if changes need to be made to one of the two, this can be handled by changing associated function and it is easier to maintain and change as well as use it on other cases.
In order to be easily testable and adaptable to other cases too.
create group with user (non-elevated) permissions to improve security. Token will be associated and called with this group guid.
check if url posted is same as returned.