one-time generation of django SECRET_KEY using SecureRandom.base64, fixes opdemand/deis#32