Instead of using our own random string generator function, the user secret is now being generated using secrets.token_urlsafe(). The max length of the user secret has been increased to accommodate the size of the 32 byte string.