outdated tokens are deleted before checking against cookies
if an invalid token is used we delete all stored tokens for saveness
used token will be replaced by a new one after successful authentication

switched from time() to internal method OC_Util::generate_random_bytes()

This reverts commit 183cc225.