slightly consolidate onepw functions under crypto/password.js