use config constant to generate password