The temporary password should not be 20 alfanumerics long

[Giszmo]

As the password is only valid for 24h anyway, significantly shorter/simpler passwords should be perfectly fine, too. Please don't make the users type in a long password for single use.

[hugohn]

Fixed.