don't need to require SecureRandom in ruby 2.0