CFY-5672 Autogenerate token auth secret_key

[tehasdf]

There is no need for the user to ever care about the secret_key value, the only thing that matters is that it isn't easy to guess (or repeated across hosts).

Try to see if the auth token generator is used, and if it is, generate a safe secret_key during bootstrap.