make random_password securely random

Have only roughly tested this in `irb` so far ;-)