Use a random reservation token

The pseudo-crypto-random token can be guessed pretty easily, since most
of the information is public or not very hard to obtain.

Props @guille
Merge pull request #70 from nb/random-reservation-token

Use a random reservation token