use SecureRandom#urlsafe_base64 to create names