Preserve entropy in TokenGenerator

base_convert loses precision on large inputs. Use URL-safe base64_encode instead.
Updated the changelog and the upgrade instructions
Merge branch 'preserve_entropy' into 1.3.x