Just to make sure I understand the problem (as I believe I'm having a similar problem), does this have to do with the fact that password says it is [User Set] in the welcome email when an admin adds a new user, even though the admin side and the front end side never prompted either the admin nor the user for a password?