Change session_token generator to urlsafe form