password generation according to xkcd 936