Use secure password

We really want to protect this from accidental
guessing.
Merge pull request #372 from dirkmueller/security

Use secure password