security: replaced mt_rand with rand per http://www.openwall.com/lists/announce/2013/11/04/1