mozilla bug 844796 - use node crypto module for randomString

This makes ```randomString()``` cryptographically secure.

I tried to modify the copy of this in ```src/static/js/pad_utils.js``` as well, but apparently that is used on the client side and the ```crypto``` module is not available there. I need to figure out exactly what this is used for on the client.