APF-1391 if user is added by admin set a random password
APF-1391 Refactor UserManager/PasswordTokenManager 

Allowing multiple token management implementations.