fix web password generation