Generate secret random token to use instead of ID

[dahoo]

Currently everyone can update the paper data. Rather than using the ID to update it, generate a token (e.g. with SecureRandom.hex) and store it with the paper. Use this token as an identifier on paper update.