auto-generate kibana password if unset