Fix race in ext.RandId

The *rand.Rand source was not protected against concurrent access.