modify password to use Lorem.characters

* parameter lengths now accurately reflect length of password
* added a max length parameter, now makes a random password of length
between min and max

Closes #197