Use urlsafe_base64 for random key generation