better secret token generator.  closes #13.