remove this, already done
generate random number for verification token