Use sal_get_random_token_lowercase in tests to ensure username compatibility with FlexiAPI validation restrictions