Use secure-random
Oops - also changed bot to allow messages