Catch exception from sjcl.decrypt
Don't warn about empty storage URL

Make it possible to use without providing storage. It'll function like
passwordmaker or any other hash password generator. Except it'll be more
secure.
Add test page for timing PBKDF2
Check the domain is the same before inserting password