get securely random bytes and use them for signatures (WIP)
Merge branch 'master' into 2-random-secrets
simplify authentication logic - fix case of invalid cookie + valid assertion
properly seed apr's PRNG with random bytes
Merge pull request #7 from mozilla/2-random-secrets

2 random secrets