Save encrypted blob decrypt key at login if missing

also:

increased entropy for standalone vault test
fixed issue where register was using lowercase version of username
added username validation rules
It would be much better if you defined this callback as a named function outside of the condition