Issue #282 - Pasword-based key derivation - Proposed text

The attached is proposed text to be added to the Username Token Profile to enable key derivation. The first part is intended to be a new section and the latter part is to be added to the security considerations section.

Hal