-always use sjcl.random instead of Math.random
-fix password length when excluding symbols