better randomPassword function

use window.crypto.getRandomValues instead of math.random as the former
is cryptographically secure in all browsers, the former is not
use current domain name instead of hushfile.it