Switched to mt_rand

standard rand() was causing some strings to not generate compliant
passwords