Add explicit casts to uint64

[jeremykubica]

Adds more explicit casts to uint64.

Also adds a safety check when computing the median (though it should not trigger).