generate password
reset password and notify fake