Secure random generator returned by SecureRandom.getInstanceStrong() is too slow on some environment.

I think DefaultWebSessionManager should have a setter method for
SecureRandom generator. And the default instance should generated from
`new SecureRandom()`.