generate clientSecret. also changed algorithm to use SecureRandom class