You'll eventually want some kind of check here to make sure you don't generate the same token twice (the inherent problem with randomness).