Use a more secure default for the repoze secret key

The who.ini file has a secret key used during authentication. To make sure users don't forget to update it we can use the beaker session secret which is generated randomly when creating the ckan ini file.