Do a better job at being randomer

uniqid is not very random, and is deprecated.

https://wiki.php.net/rfc/deprecations_php_8_4#deprecate_uniqid

re: #574

classes/user.php

@@ -200,7 +200,7 @@ function IsTaskAllowed($task) {
 	}
 
 	function createUserToken() {
-		$token = hash('sha256', uniqid(random_int(0, getrandmax()), true));
+		$token = bin2hex(random_bytes(32));
 		return $token;
 	}