use os.urandom for generating crypto secure random strings instead of platform specific /dev/urandom