Framework for password generators

small fix: regenerate session id after user credentials are fetched