Suggest -hex instead of -base64 for password generation

(this should avoid problematic slashes in the database url)