add Password utility class
fix typo in comment
use Password utility class
use Password class for password generation