Use random UUID's instead of random strings for account creation and password reset tokens.