#3 Review npm test and apply fixes as needed

Using Math.random is not cryptographically secure! Use bcrypt.setRandomFallback to set a PRNG.

Mostly mind this one: Using Math.random is not cryptographically secure! Use bcrypt.setRandomFallback to set a PRNG.