add an extra 16 bits of randonimity to uuid when generating token, then base64 encode