Use long python module names. No need to provide shortcuts - long names are more readable and the API's are widely understood.
Sketchy makefile, use virtualenv
Initial .gitignore
Spurious comments
Move password generation up, why not. use random.choice() instead of chr, and the string.ascii_letters trick. Print secret on hte screen - screen is trusted.
Final adaptations. Make the success message more exciting :)
Describe how to run the stuff in readme. People don't need to know what it does :)
any python 3 (3.3 for example)
Heroku-ify the code (ie: make it runnable on heroku)
crash: length and form not defined
Explicitly define app, not internal Bottle thing
Create a wrapping "app"
requests module is handy
ah, post was broken
401 on wrong passwrord
maybe routing / would be enough
move passwd generation up
move back... also, _urandom is called if possible therefore whole exercise was impossible
after Marek's changes