reenable has_secure_password and generate a long fake string as a password for oauth users