In Spring Security, remember me tokens are validated by comparing them with values stored in the database. Given this, why do we need a secret key for generating the tokens? What additional security does it provide?