assign random password to users