create user with automatically generated random password