Fix #5: automatic password offering