Fix passphrase generation

Maybe GET with a Auth HTTP header?