[stoney] make random_password securely random

I just realized I forgot to squash the two commits together in roxy... Oh well.