Use shorter tokens

These preserve security (in fact, improve it slightly, with 2^128 bits
of entropy as opposed to 2^122 for a v4 UUID) but take less space in the
email, there's less to type if you need to do that.
Merge pull request #9 from ministryofjustice/shorter-tokens

Use shorter tokens