Switch to secure random for password generation

Perhaps a 'secure' random number generator should be used in haddock? Depending on what haddock passwords are used for the greater predictability of the plain rand() function could be an issue.