create unique login token for each user

We were setting login token using `SecureRandom.urlsafe_base64` before user's creation and login token is unique for each user, so we must ensure that it should be unique for all users.