pub fn generate_token() -> String
Mint a fresh, unguessable CSRF token (256 bits of randomness, hex-encoded).