Improved device id hash generation

[sinamics]

Generation and Storage

• During sign-in, the system checks for an existing device ID in the user's cookies.
• If no device ID is found, a new random 16-byte device ID is generated.
• This device ID is stored as an HTTP-only cookie during the user's first sign-in or when no existing device ID is found.
• The device ID is also stored in the database, associated with the user's account.

Verification in JWT Callback

• The device ID is added to the JWT token during sign-in.
• In subsequent requests, the JWT callback checks if the device ID in the token exists in the database.
• If the device is found, its 'lastActive' timestamp is updated.
• If the device is not found, the device ID is removed from the token and user is signed out.

Related #526