fix(upload): replace predictable uniqid() with cryptographically secure random_bytes()

fix(upload): replace predictable uniqid() with cryptographically secure random_bytes() #450