Desktop app should use password instead of PIN - seed should be encrypted using password

[hiddentao]

As the title says.

Furthermore, the seed should not be kept in memory - it should only be accessed as and when needed to generate accounts, sign data and transactions.