added secure_token generator for sessions