Merge pull request #138 from wtlucy/secureRandom2_2.1.x

MYFACES-4373: make sure SecureRandom is used for invalid configs 2.1.x