Create url safe password reset tokens.

[wout]

I'm sorry it has taken this long, I've been really busy the past two weeks. 😊

Purpose

Fixes #1092.

Checklist

• - An issue already exists detailing the issue/or feature request that this PR fixes
• - All specs are formatted with crystal tool format spec src
• - Inline documentation has been added and/or updated
• - Lucky builds on docker with ./script/setup
• - All builds and specs pass on docker with ./script/test

[jwoertink]

I don't know a whole lot about Base64, but I wonder if we should chomp off =...

https://play.crystal-lang.org/#/r/8xwv

As you can see here, if we take off the = it still decodes normal, but I don't know if that's an always case, or just happens to be true here. I just suggest that because I've had issues with the = in the past with other things. But maybe it's fine?

In any case, this is probably better than what we have now, so thanks for that!

[wout]

The trailing ='s are padding to make sure the length of the string is divisible by four. They're just there in case a string gets concatenated. They can be removed, but to what avail? They don't pose any danger unless you have a very unfortunate situation with query params and a ? involved, which is impossible in this scenario.

In what situation did you run into any issues?

[jwoertink]

ah! Ok, that makes sense. I never knew what they were for. I'm cool with keeping them then. I don't remember the issue since it's been a while. I just remember stripping those off for some reason. It was probably just a poor hack 😅

[paulcsmith]

Thank you! No worries on taking a bit, we're all quite busy, especially during these crazy time.