use Base64 for token generation in order to have less chance of a collision