use cryptographically secure prng for nonces
Merge pull request #3 from sczi/fixrand

use cryptographically secure prng for nonces