Documents are served only when an appropriate token is included in the
query params. The token is a SHA 256 of todays date, a secret string,
and the documents ID. This way the token is only valid for one document
for one day.