switch hashing a timestamp to crypto.randomBytes()

the crypto.randomBytes() implementation is pretty much definitely going
to do a better job at randomness than a hashed timestamp, and might even
be faster to boot.