add support for optional passphrase

... as per BIP39 specification