Fix passphrase generation

No sure if I understand the code correctly:

newSecret = this.makeSecret(key) 
                 =  cryptoUtil.kdf(key + this.password) 
                 =  cryptoUtil.kdf( cryptoUtil.kdf(this.password + this.email) + this.password) 

if that correct? Why we are applying kdf twice?