fixed bug in diceware using default wordlist; reverted h2 to h1 header in login page