Token model and tests with Secure Random; expiration 3 days later