Randomly generate password if one not given
Add reset password endpoint