Use io.ReadFull for generating auth tokens.

I actually had a failure to read a full buffer with Read -- apparently
ran out of entropy.