better random state; catching all exceptions on authenticator;