core: fix password generator