use pseudoRandom bytes for token
0.0.1-3