Hash the recovery token