default $_rand to MCRYPT_DEV_URANDOM

and document that we're silently revert to MCRYPT_DEV_URANDOM
when using MCRYPT_RAND