Use a random reservation token

The pseudo-crypto-random token can be guessed pretty easily, since most
of the information is public or not very hard to obtain.

Props @guille