in createSecureToken(), if crypto.randomBytes() throws, fallback gracefully.