Sjcl

use Standford Javascript Crypto library for psuedo random number generation.  While javascript will *never* be totally safe to run in-browser, this is definitely better than using `Math.random` for server-side applications.