feat(be): use crypto/rand instead of math/rand

[fiftin]

For security reason I replaced math/rand to crypto/rand in places where it is critical. I didn't do this in tests.