use social_id's last six char to be default passwd