Using SecureRandom for Rails cookies instead of hardcoded secret