protected function generateToken() { return hash_hmac('sha256', Str::random(40), config('app.key')); }
