Replaced token password with passphrase

Fix #1269 (closed), comment

This changes get_token() to return a passphrase rather than a password. The wordlist is from eff.org.

I'm not really sure if test/changelog is necessary, or how to actually fix it :)

This Merge Request includes:

• Tests
• A changelog fragment