Use SecureRandom

Ruby's `Random` is psuedo random. The numbers it generates can be predicted and exploited by an attacker. See http://www.sitepoint.com/tour-random-ruby/