the admin can now send an email to the user to set his password this is a random generated string and his id