Fix tag system, add initial password behavior

...tag it with `knp_rad_user.salt_generator` tag.