force submitted key to be 16 bytes, and make more browserify friendly