Really secure token for Rails app