password generation passed to user side, issue #39 fixed