auth: improve token generation function

1. Don't use the same key for all tokens
2. Don't discard nanosecond information when formatting time.Now()

Also added test to guarantee that token() function won't generate
repeated tokens.
auth, etc: remove auth:token-key setting

Now the key is random.