Update controller.php

HackerOne report 31171

Patch: If possible, use a CSPRNG for authentication.
Merge pull request #1315 from sarciszewski/patch-1

Update controller.php