now generating password automatically if none supplied