making sure random secret is a string