fixed bug in _.randomString