random eight char token for authentication