pub fn generate_token() -> Result<String, Error>
A new session token: 256 random bits, base64url without padding (43 characters).