support for server-side autogenerated passwords