@flavioheleno : as it goes only once per user (when he/she manually authorizes the connection with the oauth provider from his/her browser window) it should not affect your use case. Anyway I think i will switch to the simpler solution proposed by google `return md5(rand());`

Thanks for all the opinions