URL safe Base64 token generation.
Temporary tokens are only valid once for verification of email and password reset.