EAP-pwd server: Use os_get_random() for unpredictable token