You are exactly rite on this, the emailed password should be the non encrypted password held in the session variable where you set the random password. If you have any trouble updating this post back with the forgot password page in question.
Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.
These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.