Generates a cryptographically random, URL-safe reset token string.
A 32-byte token encoded as base64url.
Generates a cryptographically random, URL-safe reset token string.