* revise first-time-use screen * generate password (policy applies) * hide/reveal password text for sta/admin settings * changed autocomplete='...' for some inputs to avoid completion