added changePwd to change users password
changed randomPassword.js to make salt less remarkable (hex)