web server implementation for the password generation flow