can't `rand(users_length)` return 0?