add the generation of a random password to User creation