Randomness of app authorisation