Does my GenerateRefreshTokenString() method is secure enough? - C#