Fixed an NPE in PasswordStrength checker
make email factor out usable
fixup! Finish up signup process (so that it's usable except "verify")

random token generation was broken