auth_base: choose random password if not supplied by auth module