Update pbkdf2.js

On simple inspection this looks wrong... haven't tested!