diff --git a/webv4/lib/auth.js b/webv4/lib/auth.js
index fcf725e42f8ca0092140da70744b598c746f6a2e..bf1583886373f60d40ea0efea8f23b93e9a82517 100644
--- a/webv4/lib/auth.js
+++ b/webv4/lib/auth.js
@@ -1,10 +1,12 @@
 require('sbbsdefs.js', 'SYS_CLOSED');
 
 function randomString(length) {
-	var chars = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz'.split("");
+	var chars = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz'.split('');
 	var str = '';
 	for (var i = 0; i < length; i++) {
-		str += chars[Math.floor(Math.random() * chars.length)];
+		var rn = Math.floor(Math.random() * chars.length);
+		if (rn >= chars.length) log(LOG_DEBUG, "Impossible number: " + rn);
+		str += chars[rn];
 	}
 	return str;
 }