[SECURITY] Better token generator

Fixes #1158:

* Create random string using OpenSSL