Improvements to functions.inc.php

Finished pwstrength() with the ability to choose custom password
requirements, finished the pwhash(), added strip_html() to remove HTML
and prevent XSS.

Removed reference call on line 234 to fix "Fatal error: Call-time
pass-by-reference has been removed"