I just created a new user. If you click on the link that is offered at the end of this process to log in immediately , you can see the password for a short time in the browser's address field. Using get to submit passwords is not a good idea.
yes this must be configurable by the admin :
1. send generated password by email
2. automatic login
3. user must login hiself
wanna do it ?