Improve session tokens

This pull request includes two features:

(1) tokens become Base64 encoded and generally monotonic

(2) optional support for crypto-strength session ID's if Math::Random::ISAAC::XS and Crypt::URandom are installed