Stronger user token generation