debug password sent while get userinfo
return nouse pwd & gen more complex pwd for thirdparty user
no static service in production env
add md5
adjust reserveNum to 50