Sanitize password to a randomly generated password

Sanitizing the password to the fixed string 'password' is an insecure
default.

Since most people probably won't be aware of the sanitizing when doing an sql-sync they could end up with publicly available sites with insecure passwords.