stoken: Fill in "password" fields with a generated tokencode