Backfill remember_token for existing user records

The clearance migration to add clearance fields to an existing users
table now also ensures each user has a generated remember_token.
Extract `Clearance::Token`

This overrides new to return a string suitable for use as a token.