removed urlencoding from adduser()
get_random_password() now sends some GET query args