random list should  only be from current user
security so you cant access other users lists