updated xkcd.php to incorporate numbers in password