how does the auth.$context.generateId({ model: "users" }) work? how safe is it/what algorithm is it using?