fixes, have to switch to crypto/rand