removed password generation in favour of bs-web