allow random passwords