remove string.punctuation from random string generator, closes Issue #3

Since the passwords are intended to be temporary for first-time login
only, with the user required to change their password I've just remove
string.punctuation and will rely on string.letters + string.digits to be
sufficient for now.