pub fn new_binding_token() -> String
A fresh browser-binding token, to be set as a cookie before the redirect.