Swap out Random for SecureRandom. Used for password resets only,
so not super critical, but does indeed close a loophole.