adds password generation when user is created from external provider