Generate random cookie signing secret if none present