Update to the last version of password_compat
Improve token generation by using openssl by default, then /dev/urandom and fallback to uniqid()