Use django.utils.crypto for random key (closes #648)