a weaker password was being generated after login (boohoo)