Improve token generation by using openssl or /dev/urandom or uniqid() as fallback