Use SecureRandom instead of Random to generate app secret