When creating random new users, secure their password as well.
Return the generated password as we may need to display the raw password somewhere.
Remove debug print statement.
The password reset code now is hashing aware and uses that route to generate new passwords.