explicit money gem version
use securerandom for user suggested password