actually generate and check secret picture/word passwords
Merge pull request #1125 from code-dot-org/secret-picture-word

actually generate and check secret picture/word passwords