TK: now password generator uses out of the box solution using org.apache.commons.lang.RandomStringUtils