Re: NGINX as some sort of token server.

This is easily defeated, your better of with something like moving a box with the mouse to access resources.
For example https://www.phpbb.com/customise/db/mod/sortables_captcha_plugin/ is a good one.