The password is generated inline by using wfGenerateToken combined with the const, so changing name of const is most appriopriate in this case.

Checked whole code against appearance of HEX_CHARS and it's only inside this class.