added cjd's comment re password gen