generate password on PUT