Function mint_token 

pub fn mint_token() -> String

pcn_ + 32 random bytes as unpadded base64url; the caller shows it once and stores only hash_token of it.