Change default generated password length
Add warning about openssl usage and use SecureRandom