Switched to crypto/rand and removed sha256 hashing
Further elaborating my choice of not caring about the error value
merge: The new token generation algorithm. Fixes #1.