Made getRandomString generate a cryptographically strong random string of an arbitrary length
Modified tokenlib to cipher the token before sending it to the client and decipher it when recieved from the client using the session password
general formating
changed cipher algorithm and input/output format
updated tests
Made encrypting the header optional
reverted test-authtoken to previous behaviour, created new test using encrypted token and initialization method for it
Update README.md
fixed formatting for readability
refactoring
centralized constants on a external module, more sessionManager refactoring
cipher user header as well
updated readme.md
reprased the encryptHeader description
added as contributor and bumped version to 0.6.11
removed unused constants and formatting
Merge branch 'master' of https://github.com/IGZalejandropenedo/cansecurity into IGZ-master

Conflicts:
	lib/declarative.js
	package.json
	test/test-declarative-authorization.js
Fixed tests so that they run init() *inside* the before() clause