Use same keygen used by django-admin startproject

* Uses cryptographically secure RNG if available
* Warns if no secure RNG available